forked from wolfSSL/wolfssl
fix for sanity check on PKCS7 indef read
This commit is contained in:
@@ -4590,8 +4590,13 @@ static int PKCS7_VerifySignedData(PKCS7* pkcs7, const byte* hashBuf,
|
|||||||
ret = ASN_PARSE_E;
|
ret = ASN_PARSE_E;
|
||||||
}
|
}
|
||||||
/* if indef, skip EOF */
|
/* if indef, skip EOF */
|
||||||
if (isIndef && pkiMsg[idx] == ASN_EOC && pkiMsg[idx+1] == 0) {
|
if (isIndef) {
|
||||||
idx += 2; /* skip EOF + zero byte */
|
if (idx + 1 >= pkiMsgSz) {
|
||||||
|
ret = ASN_PARSE_E;
|
||||||
|
}
|
||||||
|
else if (pkiMsg[idx] == ASN_EOC && pkiMsg[idx+1] == 0) {
|
||||||
|
idx += 2; /* skip EOF + zero byte */
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user