change call to GetSigAlg in ASN original to sanity check length

JacobBarthelmeh · JacobBarthelmeh · commit a47802908321 · 2026-04-30T09:03:52.000-06:00
diff --git a/wolfcrypt/src/asn_orig.c b/wolfcrypt/src/asn_orig.c
@@ -2785,7 +2785,7 @@ static int GetSigAlg(DecodedCert* cert, word32* sigOid, word32 maxIdx)
             int len;
 
             WOLFSSL_MSG("Cert sigAlg is RSASSA-PSS; decoding params");
-            if (GetHeader(cert->source, &tag, &tmpIdx, &len, endSeqIdx, 0) < 0) {
+            if (GetHeader(cert->source, &tag, &tmpIdx, &len, endSeqIdx, 1) < 0) {
                 return ASN_PARSE_E;
             }
             cert->sigParamsIndex  = cert->srcIdx;

Original file line number	Diff line number	Diff line change
`@@ -2785,7 +2785,7 @@ static int GetSigAlg(DecodedCert* cert, word32* sigOid, word32 maxIdx)`
`2785`	`2785`	`int len;`
`2786`	`2786`
`2787`	`2787`	`WOLFSSL_MSG("Cert sigAlg is RSASSA-PSS; decoding params");`
`2788`		`- if (GetHeader(cert->source, &tag, &tmpIdx, &len, endSeqIdx, 0) < 0) {`
	`2788`	`+ if (GetHeader(cert->source, &tag, &tmpIdx, &len, endSeqIdx, 1) < 0) {`
`2789`	`2789`	`return ASN_PARSE_E;`
`2790`	`2790`	`}`
`2791`	`2791`	`cert->sigParamsIndex = cert->srcIdx;`