From 5ce7118a35fa9cbde5d89f418d36a13bf5beb79f Mon Sep 17 00:00:00 2001 From: Levi Neely <141506390+lneely@users.noreply.github.com> Date: Tue, 3 Mar 2026 19:53:01 +0100 Subject: [PATCH] Fix pcl-zqv.4.12: add bounds check in trim_der_key (#341) Co-authored-by: Levi Neely --- pclsync/pssl.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pclsync/pssl.c b/pclsync/pssl.c index d95090d..735fdb4 100644 --- a/pclsync/pssl.c +++ b/pclsync/pssl.c @@ -621,6 +621,9 @@ static void trim_der_key(unsigned char *keydata, size_t *keylen) { } header_size = p - keydata; correct_len = header_size + len; + if (header_size > *keylen || correct_len > *keylen) { + return; + } trimmed = malloc(correct_len); if (!trimmed) return; memcpy(trimmed, keydata, correct_len);