forked from wolfSSL/wolfssl
Merge pull request #4236 from kabuobeid/serialSz
Fix signed comparison issue with serialSz.
This commit is contained in:
@ -10696,13 +10696,13 @@ int GetSerialNumber(const byte* input, word32* inOutIdx,
|
|||||||
if (ret != 0)
|
if (ret != 0)
|
||||||
return ret;
|
return ret;
|
||||||
|
|
||||||
if (*serialSz > EXTERNAL_SERIAL_SIZE) {
|
if (*serialSz > EXTERNAL_SERIAL_SIZE || *serialSz <= 0) {
|
||||||
WOLFSSL_MSG("Serial size bad");
|
WOLFSSL_MSG("Serial size bad");
|
||||||
return ASN_PARSE_E;
|
return ASN_PARSE_E;
|
||||||
}
|
}
|
||||||
|
|
||||||
/* return serial */
|
/* return serial */
|
||||||
XMEMCPY(serial, &input[*inOutIdx], *serialSz);
|
XMEMCPY(serial, &input[*inOutIdx], (size_t)*serialSz);
|
||||||
*inOutIdx += *serialSz;
|
*inOutIdx += *serialSz;
|
||||||
|
|
||||||
return result;
|
return result;
|
||||||
|
Reference in New Issue
Block a user