| commit | ba77bbf840b8b70ad7f24ef516f71ed8ff340a25 | [log] [tgz] |
|---|---|---|
| author | Manuel Pégourié-Gonnard <mpg@elzevir.fr> | Thu Aug 15 13:38:13 2013 +0200 |
| committer | Paul Bakker <p.j.bakker@polarssl.org> | Fri Aug 16 14:00:52 2013 +0200 |
| tree | 53506512fe6a7b95e5aa3f7fe60bacba8d65bc0f | |
| parent | 06dab806ce3245f856618a13a262a2e4e4a19e9f [diff] [blame] |
Fix memory error in asn1_get_alg()
diff --git a/library/asn1parse.c b/library/asn1parse.c index 9d42f05..ff566c9 100644 --- a/library/asn1parse.c +++ b/library/asn1parse.c
@@ -292,8 +292,11 @@ ASN1_CONSTRUCTED | ASN1_SEQUENCE ) ) != 0 ) return( ret ); - end = *p + len; + if( ( end - *p ) < 1 ) + return( POLARSSL_ERR_ASN1_OUT_OF_DATA ); + alg->tag = **p; + end = *p + len; if( ( ret = asn1_get_tag( p, end, &alg->len, ASN1_OID ) ) != 0 ) return( ret );