From: Michael Brown <mcb30@ipxe.org>
Date: Mon, 3 Aug 2026 14:50:34 +0000 (+0100)
Subject: [crypto] Avoid false positive warnings about out-of-bounds access
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=75fe3d50ce6b6b103e3102daddea06239fc7d31d;p=thirdparty%2Fipxe.git

[crypto] Avoid false positive warnings about out-of-bounds access

The last byte within a non-empty ASN.1 bit string object always
exists, but automated tools tend to erroneously report the way in
which we access it as being out of bounds.

Move the assignment of the last byte pointer to be ahead of the
shrinking of the cursor, to eliminate this class of false positive
warning.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/src/crypto/asn1.c b/src/crypto/asn1.c
index 9a0e25649..32745a098 100644
--- a/src/crypto/asn1.c
+++ b/src/crypto/asn1.c
@@ -399,12 +399,12 @@ int asn1_enter_bits ( struct asn1_cursor *cursor, unsigned int *unused ) {
 		return -EINVAL_BIT_STRING;
 	}
 	bit_string = cursor->data;
+	last = ( cursor->data + cursor->len - 1 );
 	cursor->data = &bit_string->data;
 	cursor->len -= offsetof ( typeof ( *bit_string ), data );
 	unused_bits = bit_string->unused;
 
 	/* Check validity of unused bits */
-	last = ( cursor->data + cursor->len - 1 );
 	if ( ( unused_bits >= 8 ) ||
 	     ( ( unused_bits > 0 ) && ( cursor->len == 0 ) ) ||
 	     ( ( *last & ( 0xffU >> ( 8 - unused_bits ) ) ) != 0 ) ) {