x509: make sure pem buffer will be large enough to hold pem header

Found with Fil-C compiler
This commit is contained in:
Juliusz Sosinowicz
2025-10-23 13:27:44 +02:00
parent 4daab8a813
commit 36b64fb5ae

View File

@@ -12368,7 +12368,7 @@ WOLFSSL_X509_CRL* wolfSSL_PEM_read_X509_CRL(XFILE fp,
return WOLFSSL_FAILURE;
}
if ((l = wolfSSL_BIO_get_len(bio)) <= 0) {
if ((l = wolfSSL_BIO_get_len(bio)) <= pem_struct_min_sz) {
/* No certificate in buffer */
WOLFSSL_ERROR(ASN_NO_PEM_HEADER);
return WOLFSSL_FAILURE;