Bound by curSz in PKCS12 ContentInfo parsing

2026-07-06 08:20:58 +02:00 · 2026-05-01 09:37:45 -06:00
parent 3a799bd451
commit c2d44b4359
1 changed files with 1 additions and 1 deletions
@@ -328,7 +328,7 @@ static int GetSafeContent(WC_PKCS12* pkcs12, const byte* input,

            curIdx = localIdx;
            if ((ret = GetObjectId(input, &localIdx, &oid, oidIgnoreType,
-                                                           (word32)size)) < 0) {
+                                                curIdx + (word32)curSz)) < 0) {
                WOLFSSL_LEAVE("Get object id failed", ret);
                freeSafe(safe, pkcs12->heap);
                return ret;