From 2d950f1ab4643e38b54de7d147a57f28e0b06dd1 Mon Sep 17 00:00:00 2001 From: Jacob Barthelmeh Date: Sun, 15 Mar 2020 18:46:11 -0600 Subject: [PATCH] sanity check on IV size --- wolfcrypt/src/asn.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c index 1f323ec5b..58a726fe3 100644 --- a/wolfcrypt/src/asn.c +++ b/wolfcrypt/src/asn.c @@ -10220,6 +10220,8 @@ int wc_EncryptedInfoParse(EncryptedInfo* info, char** pBuffer, size_t bufSz) } if ((newline != NULL) && (newline > finish)) { info->ivSz = (word32)(newline - (finish + 1)); + if (info->ivSz >= IV_SZ) + return BUFFER_E; if (XMEMCPY(info->iv, finish + 1, info->ivSz) == NULL) return BUFFER_E; info->set = 1;