Fixed a minor vulnerability in which a malformed ASN.1 length field could cause a...

diff --git a/src/libstrongswan/asn1/asn1_parser.c b/src/libstrongswan/asn1/asn1_parser.c
index c31fb75f0bf1827935bc26f5d1d79bcb68adc464..e7b7a428d9a2b5b56c37bdca1448461be56dc0aa 100644 (file)
--- a/src/libstrongswan/asn1/asn1_parser.c
+++ b/src/libstrongswan/asn1/asn1_parser.c
@@ -160,6 +160,7 @@ METHOD(asn1_parser_t, iterate, bool,
                DBG1(DBG_ASN, "L%d - %s:  length of ASN.1 object invalid or too large",
                                        level, obj.name);
                this->success = FALSE;
+               goto end;
        }
 
        blob1->ptr = blob->ptr;