util-decode-der: fix heap-buffer-overflow

diff --git a/src/util-decode-der.c b/src/util-decode-der.c
index 05c4671ad853fd3d5a1cebe694d67ef9cb97f6d8..67e7b0dda97345c6d2b1d945ad2000cd341a6678 100644 (file)
--- a/src/util-decode-der.c
+++ b/src/util-decode-der.c
@@ -742,6 +742,9 @@ Asn1Generic * DecodeDer(const unsigned char *buffer, uint32_t size, uint32_t *er
     Asn1Generic *cert;
     uint8_t c;
 
+    if (size < 2)
+        return NULL;
+
     /* Check that buffer is an ASN.1 structure (basic checks) */
     if (d_ptr[0] != 0x30 && d_ptr[1] != 0x82) /* Sequence */
         return NULL;