forked from wolfSSL/wolfssl
fix out of bounds read in PemToDer with 0 size der buffer, CU #4
This commit is contained in:
@ -3551,7 +3551,7 @@ int PemToDer(const unsigned char* buff, long longSz, int type,
|
|||||||
|
|
||||||
/* set up der buffer */
|
/* set up der buffer */
|
||||||
neededSz = (long)(footerEnd - headerEnd);
|
neededSz = (long)(footerEnd - headerEnd);
|
||||||
if (neededSz > sz || neededSz < 0)
|
if (neededSz > sz || neededSz <= 0)
|
||||||
return SSL_BAD_FILE;
|
return SSL_BAD_FILE;
|
||||||
|
|
||||||
ret = AllocDer(pDer, (word32)neededSz, type, heap);
|
ret = AllocDer(pDer, (word32)neededSz, type, heap);
|
||||||
|
Reference in New Issue
Block a user