From 3137d62cf3183cfea2b02ce5ce71b29880809418 Mon Sep 17 00:00:00 2001 From: Ruby Martin Date: Fri, 1 May 2026 14:06:51 -0600 Subject: [PATCH] fix issue where ToTraditional_ex may assign negative value to *pkeySz --- wolfcrypt/src/pkcs12.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/wolfcrypt/src/pkcs12.c b/wolfcrypt/src/pkcs12.c index a254b0527e..a5d796208b 100644 --- a/wolfcrypt/src/pkcs12.c +++ b/wolfcrypt/src/pkcs12.c @@ -1562,8 +1562,13 @@ int wc_PKCS12_parse_ex(WC_PKCS12* pkcs12, const char* psw, *pkeySz = (word32)size; } else { - *pkeySz = (word32)ToTraditional_ex(*pkey, - (word32)size, &algId); + ret = ToTraditional_ex(*pkey, + (word32)size, &algId); + if (ret < 0) { + *pkeySz = (word32)size; + goto exit_pk12par; + } + *pkeySz = (word32)ret; } }