Fix signed comparison issue with serialSz.

This commit is contained in:
Kareem
2021-07-23 11:15:40 -07:00
parent e8d636771f
commit 8bd304e4c5

View File

@@ -10694,13 +10694,13 @@ int GetSerialNumber(const byte* input, word32* inOutIdx,
if (ret != 0)
return ret;
if (*serialSz > EXTERNAL_SERIAL_SIZE) {
if (*serialSz > EXTERNAL_SERIAL_SIZE || *serialSz <= 0) {
WOLFSSL_MSG("Serial size bad");
return ASN_PARSE_E;
}
/* return serial */
XMEMCPY(serial, &input[*inOutIdx], *serialSz);
XMEMCPY(serial, &input[*inOutIdx], (size_t)*serialSz);
*inOutIdx += *serialSz;
return result;