crypt32: Validate parameters better in CryptDecodeObject.

5d8d9e7d · Juan Lang · Alexandre Julliard · 4c58c4bc · 5d8d9e7d
Commit 5d8d9e7d authored Aug 10, 2007 by Juan Lang Committed by Alexandre Julliard Aug 13, 2007
Hide whitespace changes
Inline Side-by-side

Showing with 10 additions and 0 deletions

decode.c dlls/crypt32/decode.c +10 -0

No files found.
--- a/dlls/crypt32/decode.c
+++ b/dlls/crypt32/decode.c
@@ -4138,6 +4138,16 @@ BOOL WINAPI CryptDecodeObject(DWORD dwCertEncodingType, LPCSTR lpszStructType,
        SetLastError(ERROR_INVALID_PARAMETER);
        return FALSE;
    }
+    if (!cbEncoded)
+    {
+        SetLastError(CRYPT_E_ASN1_EOD);
+        return FALSE;
+    }
+    if (cbEncoded > MAX_ENCODED_LEN)
+    {
+        SetLastError(CRYPT_E_ASN1_LARGE);
+        return FALSE;
+    }

    if (!(pCryptDecodeObjectEx = CRYPT_GetBuiltinDecoder(dwCertEncodingType,
     lpszStructType)))