mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-07-29 18:27:29 +02:00
sanity check on buffer size
This commit is contained in:
@ -7580,6 +7580,11 @@ static int DecodeCertExtensions(DecodedCert* cert)
|
||||
|
||||
/* check for critical flag */
|
||||
critical = 0;
|
||||
if ((idx + 1) > (word32)sz) {
|
||||
WOLFSSL_MSG("\tfail: malformed buffer");
|
||||
return BUFFER_E;
|
||||
}
|
||||
|
||||
if (input[idx] == ASN_BOOLEAN) {
|
||||
ret = GetBoolean(input, &idx, sz);
|
||||
if (ret < 0) {
|
||||
@ -14443,6 +14448,11 @@ static int DecodeOcspRespExtensions(byte* source,
|
||||
}
|
||||
|
||||
/* check for critical flag */
|
||||
if ((idx + 1) > (word32)sz) {
|
||||
WOLFSSL_MSG("\tfail: malformed buffer");
|
||||
return BUFFER_E;
|
||||
}
|
||||
|
||||
if (source[idx] == ASN_BOOLEAN) {
|
||||
WOLFSSL_MSG("\tfound optional critical flag, moving past");
|
||||
ret = GetBoolean(source, &idx, sz);
|
||||
|
Reference in New Issue
Block a user