wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-30 02:37:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

check attrib->value and attrib->valueSz before use

Browse Source
This commit is contained in:
Chris Conlon
2019-08-27 14:18:23 -06:00
parent 61d01ab7f3
commit e6252a94ce
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
wolfcrypt/src/pkcs7.c
View File

@ -3447,6 +3447,9 @@ static int wc_PKCS7_VerifyContentMessageDigest(PKCS7* pkcs7,
} }
/* advance past attrib->value ASN.1 header and length */ /* advance past attrib->value ASN.1 header and length */
if (attrib->value == NULL || attrib->valueSz == 0)
return ASN_PARSE_E;
if (attrib->value[idx++] != ASN_OCTET_STRING) if (attrib->value[idx++] != ASN_OCTET_STRING)
return ASN_PARSE_E; return ASN_PARSE_E;