Fix out-of-bounds read in gnutls_x509_ext_export_key_usage

diff --git a/lib/x509/x509_ext.c b/lib/x509/x509_ext.c
index 9a0052733eb39b5e1104122fd7db703487693fd1..3373e97aef0cb8f2fd352b9782309b6ae76c59ee 100644 (file)
--- a/lib/x509/x509_ext.c
+++ b/lib/x509/x509_ext.c
@@ -1125,7 +1125,7 @@ int gnutls_x509_ext_export_key_usage(unsigned int usage, gnutls_datum_t * ext)
        str[0] = usage & 0xff;
        str[1] = usage >> 8;
 
-       result = asn1_write_value(c2, "", str, 9);
+       result = asn1_write_value(c2, "", str, 2);
        if (result != ASN1_SUCCESS) {
                gnutls_assert();
                asn1_delete_structure(&c2);