wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-08 15:00:51 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix two issues with the authTag length in wc_PKCS7_DecodeAuthEnvelopedData.

Browse Source 
Reported by: Jorge Milla (Pig-Tail) <jorge@jmilla.es>
This commit is contained in:
Kareem
2026-07-01 14:10:58 -07:00
parent 323027d1d2
commit 6409a9e9a2
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/pkcs7.c
+14
View File
@@ -15246,6 +15246,9 @@ authenv_atrbend:
localIdx = idx;
/* Get authTag OCTET STRING */
if (ret == 0 && localIdx >= pkiMsgSz) {
ret = BUFFER_E;
}
if (ret == 0 && pkiMsg[localIdx] != ASN_OCTET_STRING) {
ret = ASN_PARSE_E;
}
@@ -15306,6 +15309,17 @@ authenv_atrbend:
ret = ASN_PARSE_E;
}
#ifdef NO_PKCS7_STREAM
/* In the streaming build the block above re-buffers enough data for
* the auth tag. Without streaming, verify the tag fits within the
* provided input before copying. */
if (ret == 0 &&
(idx > pkiMsgSz || authTagSz > pkiMsgSz - idx)) {
WOLFSSL_MSG("AuthEnvelopedData authTag exceeds input buffer");
ret = BUFFER_E;
}
#endif
if (ret == 0) {
XMEMCPY(authTag, &pkiMsg[idx], authTagSz);
idx += authTagSz;