Potential pre-authentication buffer overflow due to integer overflow in
exec/totemcrypto.c:authenticate_nss_2_3() function can lead to denial of
service or potentially to remote code execution.

Vulnerable code:

static int authenticate_nss_2_3 (
    struct crypto_instance *instance,
    unsigned char *buf,
    int *buf_len)
{
    if (hash_to_nss[instance->crypto_hash_type]) {
        unsigned char tmp_hash[hash_len[instance->crypto_hash_type]];
        int datalen = *buf_len - hash_len[instance->crypto_hash_type];

        if (calculate_nss_hash(instance, buf, datalen, tmp_hash) < 0) {
            return -1;
        }
...