james/yubikey.rs
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

lib: correct zero memory defines, correct overflow checks in _write_certificate

Browse Source
This commit is contained in:
Dave Pate
2019-01-21 15:02:05 -08:00
committed by Klas Lindfors
parent c4dbf9d02c
commit a10ab1ace5
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/util.c
+3 -1
View File
@@ -1399,8 +1399,10 @@ static ykpiv_rc _write_certificate(ykpiv_state *state, uint8_t slot, uint8_t *da
// calculate the required length of the encoded object
req_len = 1 /* cert tag */ + 3 /* compression tag + data*/ + 2 /* lrc */;
req_len += _ykpiv_set_length(buf, data_len);
req_len += data_len;
if (req_len > _obj_size_max(state)) return YKPIV_SIZE_ERROR;
if (req_len < data_len) return YKPIV_SIZE_ERROR; /* detect overflow of unsigned size_t */
if (req_len > _obj_size_max(state)) return YKPIV_SIZE_ERROR; /* obj_size_max includes limits for TLV encoding */
buf[offset++] = TAG_CERT;
offset += _ykpiv_set_length(buf + offset, data_len);