diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/libstrongswan/plugins/pkcs7/pkcs7_generic.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/libstrongswan/plugins/pkcs7/pkcs7_generic.c b/src/libstrongswan/plugins/pkcs7/pkcs7_generic.c index 0a8b1bbd0..13fe5f54a 100644 --- a/src/libstrongswan/plugins/pkcs7/pkcs7_generic.c +++ b/src/libstrongswan/plugins/pkcs7/pkcs7_generic.c @@ -114,6 +114,12 @@ pkcs7_t *pkcs7_generic_load(container_type_t type, va_list args) } if (blob.len) { + if (blob.len >= 2 && + blob.ptr[0] == ASN1_SEQUENCE && blob.ptr[1] == 0x80) + { /* looks like infinite lenght BER encoding, but we can't handle it. + * ignore silently, our openssl backend can handle it */ + return NULL; + } return parse_contentInfo(blob); } return NULL; |