diff --git a/lib/asn1/der_get.c b/lib/asn1/der_get.c
index 702fa6c2b..d02a17ecb 100644
--- a/lib/asn1/der_get.c
+++ b/lib/asn1/der_get.c
@@ -321,6 +321,7 @@ decode_generalized_time (unsigned char *p, size_t len, time_t *t, size_t *size)
     if (e) return e;
     p += l;
     len -= l;
+    ret += l;
     if (len < slen)
 	return ASN1_OVERRUN;
     e = der_get_octet_string (p, slen, &k, &l);