catch case where blen%8 != 0

This commit is contained in:
Steffen Jaeckel 2017-09-30 01:27:20 +02:00
parent 3fef07c03e
commit 40e4a66693

View File

@ -78,7 +78,7 @@ int der_decode_raw_bit_string(const unsigned char *in, unsigned long inlen,
blen = ((dlen - 1) << 3) - (in[x++] & 7);
/* too many bits? */
if (blen/8 > *outlen) {
if ((blen + 7)/8 > *outlen) {
*outlen = blen;
return CRYPT_BUFFER_OVERFLOW;
}