commit e90cbc3d1260901efc879178a15f2d90a5e17612
author Jonathan Winzig <jwinzig@hilscher.com> Wed Jan 10 13:26:36 2024 +0100
committer Dave Rodgman <dave.rodgman@arm.com> Mon Jan 22 16:00:07 2024 +0000
tree 56429a0b198070e7b99094177b1283c55e67244d
parent d78496cccf5bca8edbbfee1fcd04683d09d48b4d

Fix Issue #8687

Signed-off-by: Jonathan Winzig <jwinzig@hilscher.com>

library/x509_create.c

diff --git a/library/x509_create.c b/library/x509_create.c
index 73789da..4ffd3b6 100644
--- a/library/x509_create.c
+++ b/library/x509_create.c
@@ -195,6 +195,10 @@
 {
     mbedtls_asn1_named_data *cur;
 
+    if (val_len > (SIZE_MAX  - 1)) {
+        return MBEDTLS_ERR_X509_BAD_INPUT_DATA;
+    }
+
     if ((cur = mbedtls_asn1_store_named_data(head, oid, oid_len,
                                              NULL, val_len + 1)) == NULL) {
         return MBEDTLS_ERR_X509_ALLOC_FAILED;