#62732 Fix password validation in PasswordHasher`1: add check for upper bound for salt size before allocation an array

Author: navferty

src/Identity/Extensions.Core/src/PasswordHasher.cs

@@ -260,7 +260,7 @@ private static bool VerifyHashedPasswordV3(byte[] hashedPassword, string passwor
             int saltLength = (int)ReadNetworkByteOrder(hashedPassword, 9);
 
             // Read the salt: must be >= 128 bits
-            if (saltLength < 128 / 8)
+            if (saltLength < 128 / 8 || saltLength + 13 > hashedPassword.Length)
             {
                 return false;
             }