cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-11-03 20:22:59 -05:00
Code Issues Packages Projects Releases Wiki Activity

mbedtls_asn1_get_bitstring_null: fix rejection of short inputs

Browse Source 
Fix improper rejection of bitstrings with length less than 2.
This commit is contained in:
Gilles Peskine 2019-03-01 18:08:35 +01:00
parent f7d6acd475
commit e40d1207eb
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
library/asn1parse.c
View File

@ -230,8 +230,13 @@ int mbedtls_asn1_get_bitstring_null( unsigned char **p, const unsigned char *end
if( ( ret = mbedtls_asn1_get_tag( p, end, len, MBEDTLS_ASN1_BIT_STRING ) ) != 0 ) if( ( ret = mbedtls_asn1_get_tag( p, end, len, MBEDTLS_ASN1_BIT_STRING ) ) != 0 )
return( ret ); return( ret );
if( (*len)-- < 2 || *(*p)++ != 0 ) if( *len == 0 )
return( MBEDTLS_ERR_ASN1_INVALID_DATA ); return( MBEDTLS_ERR_ASN1_INVALID_DATA );
--( *len );
if( **p != 0 )
return( MBEDTLS_ERR_ASN1_INVALID_DATA );
++( *p );
return( 0 ); return( 0 );
} }