guard against heap buffer overflow

This commit is contained in:
Ruby Martin
2026-03-25 11:07:32 -06:00
parent 50448ef7c6
commit d4b25d0ebc
+7 -2
View File
@@ -9151,8 +9151,13 @@ int wc_CheckPrivateKeyCert(const byte* key, word32 keySz, DecodedCert* der,
if (ret == 0) {
if (der->sapkiOID == RSAk || der->sapkiOID == ECDSAk) {
/* Simply copy the data */
XMEMCPY(decodedPubKey, der->sapkiDer, der->sapkiLen);
pubKeyLen = der->sapkiLen;
if ((word32)der->sapkiLen > pubKeyLen) {
ret = BUFFER_E;
}
else {
XMEMCPY(decodedPubKey, der->sapkiDer, der->sapkiLen);
pubKeyLen = der->sapkiLen;
}
}
else {
#if defined(WC_ENABLE_ASYM_KEY_IMPORT)