commit 4c7d7bf583ffb7cde2d568d465e6565bb4d21b21
author Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com> Wed Aug 23 11:28:30 2023 +0100
committer Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com> Wed Aug 23 11:28:30 2023 +0100
tree fc9742d0c82868efc428853617bc72eb93daf022
parent 15df01240d339a0bf897b49854b966fd117db91a

Add guard for empty AttributeValue

Signed-off-by: Agathiyan Bragadeesh <agathiyan.bragadeesh2@arm.com>

library/x509_create.c

diff --git a/library/x509_create.c b/library/x509_create.c
index 677b568..63894a5 100644
--- a/library/x509_create.c
+++ b/library/x509_create.c
@@ -273,7 +273,10 @@
         }
 
         if (!in_attr_type && ((*c == ',' && *(c-1) != '\\') || c == end)) {
-            if (*s == '#') {
+            if (s >= end) {
+                mbedtls_free(oid.p);
+                return MBEDTLS_ERR_X509_INVALID_NAME;
+            } else if (*s == '#') {
 #if defined(MBEDTLS_ASN1_PARSE_C)
                 if ((parse_ret =
                          parse_attribute_value_der_encoded(s, (int) (c - s), data, &data_len,