From 0fb80e09ac8cbb1a05936ce3fbb7c0574cba4e35 Mon Sep 17 00:00:00 2001
From: Aidan Garske <aidan@wolfssl.com>
Date: Mon, 14 Sep 2026 10:00:30 -0700
Subject: [PATCH] F-14015 - Fail TPM2_ParsePublic on packet overflow

---
 src/tpm2.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/tpm2.c b/src/tpm2.c
index 9bde0856..03a41e11 100644
--- a/src/tpm2.c
+++ b/src/tpm2.c
@@ -7648,8 +7648,14 @@ int TPM2_ParsePublic(TPM2B_PUBLIC* pub, byte* buf, word32 size, int* sizeUsed)
     packet.buf = buf;
     packet.pos = 0;
     packet.size = (int)size;
+    packet.overflow = 0;
 
     TPM2_Packet_ParsePublic(&packet, pub);
+
+    if (packet.overflow) {
+        *sizeUsed = 0;
+        return TPM_RC_SIZE;
+    }
     *sizeUsed = packet.pos;
 
     return TPM_RC_SUCCESS;