Commit b8f355b0 by BenBE Committed by GitHub

Limit extracted size of DER sequence data

This change limits the size of extracted DER sequences to the size given in the sequence's length field.
parent 4e6c3063
......@@ -28,11 +28,13 @@
>4 string !\x02\x01\x00 {invalid}
>2 beshort <0 {invalid}
>2 beshort x header length: 4, sequence length: %d
>2 beshort+4 x {size:%d}
0 string \x30\x82 Certificate in DER format (x509 v3),
>4 string !\x30\x82 {invalid}
>2 beshort <0 {invalid}
>2 beshort x header length: 4, sequence length: %d
>2 beshort+4 x {size:%d}
# GnuPG
# The format is very similar to pgp
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment