From 861f615ca92a9de0cc9866e93fdc8070420b15e7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Sun, 5 Sep 2004 15:23:43 +0000
Subject: [PATCH] (decode_boolean): fail if length of tag is larger then len

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14187 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/asn1/der_get.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/asn1/der_get.c b/lib/asn1/der_get.c
index ecdfcac2f..29451d003 100644
--- a/lib/asn1/der_get.c
+++ b/lib/asn1/der_get.c
@@ -265,6 +265,8 @@ decode_boolean (const unsigned char *p, size_t len,
     p += l;
     len -= l;
     ret += l;
+    if (reallen > len)
+	return ASN1_OVERRUN;
     e = der_get_boolean (p, reallen, num, &l);
     if (e) return e;
     p += l;