lib: check tlv length encoding when reading complex data

2019-01-22 13:59:06 -08:00
parent 5113a5ed02
commit 7b64528cf7
1 changed files with 5 additions and 0 deletions
@@ -1457,6 +1457,11 @@ static ykpiv_rc _get_metadata_item(uint8_t *data, size_t cb_data, uint8_t tag, u

  while (p_temp < (data + cb_data)) {
    tag_temp = *p_temp++;
+
+    if (!_ykpiv_has_valid_length(p_temp, (data + cb_data - p_temp))) {
+      return YKPIV_SIZE_ERROR;
+    }
+
    p_temp += _ykpiv_get_length(p_temp, &cb_temp);

    if (tag_temp == tag) {