Don't allow importing non-RSA keys from crypto::RSAPrivateKey::CreateFromPrivateKeyInfo().

crypto/rsa_private_key_openssl.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "crypto/rsa_private_key.h"
 
 #include <openssl/bio.h>
 #include <openssl/bn.h>
 #include <openssl/evp.h>
 #include <openssl/pkcs12.h>
@@ skipping 73 matching lines @@
   // PKCS#8 decode the input, and then import the EVP_PKEY from Private Key
   // Info structure returned.
   const uint8_t* ptr = &input[0];
   ScopedPKCS8_PRIV_KEY_INFO p8inf(
       d2i_PKCS8_PRIV_KEY_INFO(nullptr, &ptr, input.size()));
   if (!p8inf.get() || ptr != &input[0] + input.size())
     return NULL;
 
   scoped_ptr<RSAPrivateKey> result(new RSAPrivateKey);
   result->key_ = EVP_PKCS82PKEY(p8inf.get());
-  if (!result->key_)
+  if (!result->key_ || EVP_PKEY_id(result->key_) != EVP_PKEY_RSA)
     return NULL;
 
   return result.release();
 }
 
 // static
 RSAPrivateKey* RSAPrivateKey::CreateFromKey(EVP_PKEY* key) {
   DCHECK(key);
   if (EVP_PKEY_type(key->type) != EVP_PKEY_RSA)
     return NULL;
@@ skipping 24 matching lines @@
 
 bool RSAPrivateKey::ExportPrivateKey(std::vector<uint8>* output) const {
   return ExportKey(key_, i2d_PKCS8PrivateKeyInfo_bio, output);
 }
 
 bool RSAPrivateKey::ExportPublicKey(std::vector<uint8>* output) const {
   return ExportKey(key_, i2d_PUBKEY_bio, output);
 }
 
 }  // namespace crypto