Suyu/mbedtls
1
0
Fork 0
mirror of https://git.suyu.dev/suyu/mbedtls.git synced 2025-12-21 21:36:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix potential integer overflow parsing DER CRL

Browse source 
This patch prevents a potential signed integer overflow during the
CRL version verification checks.
This commit is contained in:
Andres AG 2017-02-10 14:39:58 +00:00 • committed by Simon Butcher
parent d922c78aa4
commit 4f753c1186
2 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
library/x509_crl.c
View file

@ -352,14 +352,14 @@ int mbedtls_x509_crl_parse_der( mbedtls_x509_crl *chain,
return( ret );
}
crl->version++;
if( crl->version > 2 )
if( crl->version < 0 || crl->version > 1 )
{
mbedtls_x509_crl_free( crl );
return( MBEDTLS_ERR_X509_UNKNOWN_VERSION );
}
crl->version++;
if( ( ret = mbedtls_x509_get_sig_alg( &crl->sig_oid, &sig_params1,
&crl->sig_md, &crl->sig_pk,
&crl->sig_opts ) ) != 0 )