fix out of range issue found by fuzz.

fix #36 Signed-off-by: Yang, Longlong <[email protected]>
ccc-spdm-tools · Feb 21, 2024 · ab2fd03 · ab2fd03
1 parent b9e6bb9
commit ab2fd03
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/spdmlib/src/crypto/x509v3.rs b/spdmlib/src/crypto/x509v3.rs
@@ -381,6 +381,9 @@ fn get_key_usage_value(data: &[u8]) -> SpdmResult<(bool, u8)> {
     let mut find_key_usage = false;
     let len = data.len();
     let key_usage_oid_len = OID_KEY_USAGE.len();
+    if len < 1 {
+        return Err(SPDM_STATUS_VERIF_FAIL);
+    }
     let (data_length, bytes_consumed) = check_length(&data[1..])?;
     if len < 1 + data_length + bytes_consumed {
         Err(SPDM_STATUS_VERIF_FAIL)