fix bit-length check in der_decode_raw_bit_string()
This commit is contained in:
parent
062fc3ffe3
commit
0b04279890
@ -77,7 +77,7 @@ int der_decode_raw_bit_string(const unsigned char *in, unsigned long inlen,
|
|||||||
blen = ((dlen - 1) << 3) - (in[x++] & 7);
|
blen = ((dlen - 1) << 3) - (in[x++] & 7);
|
||||||
|
|
||||||
/* too many bits? */
|
/* too many bits? */
|
||||||
if (blen > *outlen) {
|
if (blen/8 > *outlen) {
|
||||||
*outlen = blen;
|
*outlen = blen;
|
||||||
return CRYPT_BUFFER_OVERFLOW;
|
return CRYPT_BUFFER_OVERFLOW;
|
||||||
}
|
}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user