oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

asn1: Fix recent der_replace_tag() bug

Browse Source 
Recently introduced.
This commit is contained in:
Nicolas Williams
2021-03-11 09:13:09 -06:00
parent 5bb5887f8c
commit d0298e5804
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/asn1/der_put.c
View File

@@ -471,6 +471,8 @@ der_replace_tag(const unsigned char *p, size_t len,
e = der_get_length(p, len, &payload_len, &len_len); e = der_get_length(p, len, &payload_len, &len_len);
if (e) if (e)
return e; return e;
if (payload_len > len)
return ASN1_OVERFLOW;
/* /*
* `p' now points at the payload; `*out' + the length of the tag points at * `p' now points at the payload; `*out' + the length of the tag points at
* where we should copy the DER length and the payload. * where we should copy the DER length and the payload.