mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-07-29 11:41:15 +03:00
Reject null bytes in DER encoded values in DNs
Signed-off-by: Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com>
This commit is contained in:
@ -239,6 +239,9 @@ static int parse_attribute_value_ber_encoded(const char *s,
|
|||||||
if ((c + 1 >= end) || (n = hexpair_to_int(*c, *(c+1))) == -1) {
|
if ((c + 1 >= end) || (n = hexpair_to_int(*c, *(c+1))) == -1) {
|
||||||
return MBEDTLS_ERR_X509_INVALID_NAME;
|
return MBEDTLS_ERR_X509_INVALID_NAME;
|
||||||
}
|
}
|
||||||
|
if (MBEDTLS_ASN1_IS_STRING_TAG(*tag) && n == 0) {
|
||||||
|
return MBEDTLS_ERR_X509_INVALID_NAME;
|
||||||
|
}
|
||||||
*(p++) = n;
|
*(p++) = n;
|
||||||
}
|
}
|
||||||
asn1_der_end = p;
|
asn1_der_end = p;
|
||||||
|
Reference in New Issue
Block a user