Check input size in DecodeNsCertType

This commit is contained in:
Juliusz Sosinowicz 2022-03-02 17:17:17 +01:00
parent d1ba82d5e5
commit f846aceee2

View File

@ -15876,13 +15876,16 @@ static int DecodeNsCertType(const byte* input, int sz, DecodedCert* cert)
int len = 0;
WOLFSSL_ENTER("DecodeNsCertType");
if (CheckBitString(input, &idx, &len, (word32)sz, 0, NULL) < 0) {
if (CheckBitString(input, &idx, &len, (word32)sz, 0, NULL) < 0)
return ASN_PARSE_E;
}
/* Don't need to worry about unused bits as CheckBitString makes sure
* they're zero. */
cert->nsCertType = input[idx];
if (idx < (word32)sz)
cert->nsCertType = input[idx];
else
return ASN_PARSE_E;
return 0;
}