mirror of
https://github.com/ARMmbed/mbedtls.git
synced 2025-05-10 17:01:41 +08:00
Allow empty ns_cert_type, key_usage while parsing certificates
Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>
This commit is contained in:
parent
21c37288e5
commit
db128f518c
@ -573,6 +573,11 @@ int mbedtls_x509_get_ns_cert_type(unsigned char **p,
|
|||||||
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, ret);
|
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, ret);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (bs.len == 0) {
|
||||||
|
*ns_cert_type = 0;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
if (bs.len != 1) {
|
if (bs.len != 1) {
|
||||||
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS,
|
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS,
|
||||||
MBEDTLS_ERR_ASN1_INVALID_LENGTH);
|
MBEDTLS_ERR_ASN1_INVALID_LENGTH);
|
||||||
@ -595,6 +600,11 @@ int mbedtls_x509_get_key_usage(unsigned char **p,
|
|||||||
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, ret);
|
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, ret);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if (bs.len == 0) {
|
||||||
|
*key_usage = 0;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
if (bs.len < 1) {
|
if (bs.len < 1) {
|
||||||
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS,
|
return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS,
|
||||||
MBEDTLS_ERR_ASN1_INVALID_LENGTH);
|
MBEDTLS_ERR_ASN1_INVALID_LENGTH);
|
||||||
|
Loading…
x
Reference in New Issue
Block a user