commit 5a198925286bf2a9ff849e5d23c930467e9c567f
author Valerio Setti <valerio.setti@nordicsemi.no> Fri Feb 02 13:59:51 2024 +0100
committer Valerio Setti <valerio.setti@nordicsemi.no> Fri Feb 02 16:44:18 2024 +0100
tree e69caa11e2384eda0de7e31c4952e668c6a383b1
parent fc590dd3612466ab343db79490cc32355d5ec86a

pkparse: fix check for ASN1 errors in mbedtls_pk_parse_subpubkey()

Signed-off-by: Valerio Setti <valerio.setti@nordicsemi.no>

library/pkparse.c

diff --git a/library/pkparse.c b/library/pkparse.c
index 91d6eb5..5a3d3b2 100644
--- a/library/pkparse.c
+++ b/library/pkparse.c
@@ -854,7 +854,8 @@
         if (ret == 0) {
             /* On success all the input has been consumed by the parsing function. */
             *p += end - *p;
-        } else if (ret & 0x7f) {
+        } else if ((ret <= MBEDTLS_ERR_ASN1_OUT_OF_DATA) &&
+                   (ret >= MBEDTLS_ERR_ASN1_BUF_TOO_SMALL)) {
             /* In case of ASN1 error codes add MBEDTLS_ERR_PK_INVALID_PUBKEY. */
             ret = MBEDTLS_ERROR_ADD(MBEDTLS_ERR_PK_INVALID_PUBKEY, ret);
         } else {