james/yubikey.rs
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

lib: check tlv length encoding when reading complex data

Browse Source
This commit is contained in:
Dave Pate
2019-01-22 13:59:06 -08:00
committed by Klas Lindfors
parent 5113a5ed02
commit 7b64528cf7
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/util.c
+5
View File
@@ -1457,6 +1457,11 @@ static ykpiv_rc _get_metadata_item(uint8_t *data, size_t cb_data, uint8_t tag, u
while (p_temp < (data + cb_data)) { while (p_temp < (data + cb_data)) {
tag_temp = *p_temp++; tag_temp = *p_temp++;
if (!_ykpiv_has_valid_length(p_temp, (data + cb_data - p_temp))) {
return YKPIV_SIZE_ERROR;
}
p_temp += _ykpiv_get_length(p_temp, &cb_temp); p_temp += _ykpiv_get_length(p_temp, &cb_temp);
if (tag_temp == tag) { if (tag_temp == tag) {