commit 686bfae2440714a6ac1bed19bf4a98fd04e688b0
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Thu Aug 15 13:40:10 2013 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Fri Aug 16 14:00:52 2013 +0200
tree 270cb86e2d24aff4a3bfaf7e2252593f38f35a75
parent ba77bbf840b8b70ad7f24ef516f71ed8ff340a25

Fix memory error in x509_get_attr_type_value

library/x509parse.c

diff --git a/library/x509parse.c b/library/x509parse.c
index ace7fe8..6d7d08d 100644
--- a/library/x509parse.c
+++ b/library/x509parse.c
@@ -287,6 +287,10 @@
             ASN1_CONSTRUCTED | ASN1_SEQUENCE ) ) != 0 )
         return( POLARSSL_ERR_X509_CERT_INVALID_NAME + ret );
 
+    if( ( end - *p ) < 1 )
+        return( POLARSSL_ERR_X509_CERT_INVALID_NAME +
+                POLARSSL_ERR_ASN1_OUT_OF_DATA );
+
     oid = &cur->oid;
     oid->tag = **p;