Merge pull request #9334 from julek-wolfssl/wolfSSL_PEM_X509_X509_CRL_X509_PKEY_read_bio-len

JacobBarthelmeh · web-flow · commit 985a090adc47 · 2025-10-23T09:36:46.000-06:00
x509: make sure pem buffer will be large enough to hold pem header
diff --git a/src/x509.c b/src/x509.c
@@ -12368,7 +12368,7 @@ WOLFSSL_X509_CRL* wolfSSL_PEM_read_X509_CRL(XFILE fp,
             return WOLFSSL_FAILURE;
         }
 
-        if ((l = wolfSSL_BIO_get_len(bio)) <= 0) {
+        if ((l = wolfSSL_BIO_get_len(bio)) <= pem_struct_min_sz) {
             /* No certificate in buffer */
             WOLFSSL_ERROR(ASN_NO_PEM_HEADER);
             return WOLFSSL_FAILURE;

Original file line number	Diff line number	Diff line change
`@@ -12368,7 +12368,7 @@ WOLFSSL_X509_CRL* wolfSSL_PEM_read_X509_CRL(XFILE fp,`
`12368`	`12368`	`return WOLFSSL_FAILURE;`
`12369`	`12369`	`}`
`12370`	`12370`
`12371`		`- if ((l = wolfSSL_BIO_get_len(bio)) <= 0) {`
	`12371`	`+ if ((l = wolfSSL_BIO_get_len(bio)) <= pem_struct_min_sz) {`
`12372`	`12372`	`/* No certificate in buffer */`
`12373`	`12373`	`WOLFSSL_ERROR(ASN_NO_PEM_HEADER);`
`12374`	`12374`	`return WOLFSSL_FAILURE;`