From ca34dbc0cdb1c4e1ab62aa4dd195cf9389b9edb7 Mon Sep 17 00:00:00 2001 From: Demi Marie Obenour Date: Thu, 8 Dec 2022 15:24:31 -0500 Subject: [PATCH] fix(auth): reject junk after certificates Certificates must not allow trailing junk after them. Change-Id: Ie33205fb051fc63af5b72c326822da7f62eec1d1 Signed-off-by: Demi Marie Obenour --- drivers/auth/mbedtls/mbedtls_x509_parser.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/auth/mbedtls/mbedtls_x509_parser.c b/drivers/auth/mbedtls/mbedtls_x509_parser.c index 87f280c13..d8f201e98 100644 --- a/drivers/auth/mbedtls/mbedtls_x509_parser.c +++ b/drivers/auth/mbedtls/mbedtls_x509_parser.c @@ -178,7 +178,7 @@ static int cert_parse(void *img, unsigned int img_len) return IMG_PARSER_ERR_FORMAT; } - if (len > (size_t)(end - p)) { + if (len != (size_t)(end - p)) { return IMG_PARSER_ERR_FORMAT; } crt_end = p + len; -- 2.39.5