Commit 16e1eea6 authored by Bernd Edlinger's avatar Bernd Edlinger
Browse files

Fix range checks with -offset and -length in asn1parse 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarMatthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/5826)
parent 18ada952

apps/asn1pars.c

+2 −2
Original line number Diff line number Diff line
@@ -258,14 +258,14 @@ int asn1parse_main(int argc, char **argv) 
        num = tmplen;

    }



    if (offset >= num) {

    if (offset < 0 || offset >= num) {

        BIO_printf(bio_err, "Error: offset too large\n");

        goto end;

    }



    num -= offset;



    if ((length == 0) || ((long)length > num))

    if (length == 0 || length > (unsigned int)num)

        length = (unsigned int)num;

    if (derout != NULL) {

        if (BIO_write(derout, str + offset, length) != (int)length) {