romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-05-28 17:37:54 +03:00
Code Issues Projects Releases Packages Wiki Activity

x509asn1: fix operator order in do_pubkey

Browse source 
Check the range before reading data, as it would otherwise read one byte
too many.

Reported-by: Andrew Nesbit
Closes #21533
This commit is contained in:
Daniel Stenberg 2026-05-07 23:35:40 +02:00
parent 3ce10063f1
commit cda0268593
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/vtls/x509asn1.c
View file

@ -1013,7 +1013,7 @@ static int do_pubkey(struct Curl_easy *data, int certnum, const char *algo,
return 1;
/* Compute key length. */
for(q = elem.beg; !*q && q < elem.end; q++)
for(q = elem.beg; q < elem.end && !*q; q++)
;
len = ((elem.end - q) * 8);
if(len) {