commit fdb588b3a775751ce9a132bfe0ce1f5ef5026ffc
author Chris Jones <christopher.jones@arm.com> Wed Apr 14 18:15:24 2021 +0100
committer Chris Jones <christopher.jones@arm.com> Thu Apr 15 11:19:56 2021 +0100
tree 9ac4bd03c159eaa2616527785ba2b3ec28de61e7
parent 9f7a693f2c89419be19054e9065f8d2b71a88aca

Fix an incorrect error code addition in pk_parse_key_pkcs8_unencrypted_der

An incorrect error code addition was spotted by the new invasive testing
infrastructure whereby pk_get_pk_alg will always return a high level
error or zero and pk_parse_key_pkcs8_unencrypted_der will try to add
another high level error, resulting in a garbage error code.

Apply the same fix from ae3741e8a to fix the bug.

Signed-off-by: Chris Jones <christopher.jones@arm.com>

library/pkparse.c

diff --git a/library/pkparse.c b/library/pkparse.c
index 3f3d558..31339c1 100644
--- a/library/pkparse.c
+++ b/library/pkparse.c
@@ -1040,7 +1040,16 @@
         return( MBEDTLS_ERROR_ADD( MBEDTLS_ERR_PK_KEY_INVALID_VERSION, ret ) );
 
     if( ( ret = pk_get_pk_alg( &p, end, &pk_alg, &params ) ) != 0 )
-        return( MBEDTLS_ERROR_ADD( MBEDTLS_ERR_PK_KEY_INVALID_FORMAT, ret ) );
+    {
+        if( ret >= -0x007F )
+        {
+            return( MBEDTLS_ERROR_ADD( MBEDTLS_ERR_PK_KEY_INVALID_FORMAT, ret ) );
+        }
+        else
+        {
+            return ret;
+        }
+    }
 
     if( ( ret = mbedtls_asn1_get_tag( &p, end, &len, MBEDTLS_ASN1_OCTET_STRING ) ) != 0 )
         return( MBEDTLS_ERROR_ADD( MBEDTLS_ERR_PK_KEY_INVALID_FORMAT, ret ) );