Add check for empty compressed certificate

Signed-off-by: Zoltan Fridrich <zfridric@redhat.com>

diff --git a/lib/tls13/certificate.c b/lib/tls13/certificate.c
index 0a6a04bef83844064251dc90e96436622cedd80c..44e7f2f39b2aae2de94d6440f3f944bf230bbfc5 100644 (file)
--- a/lib/tls13/certificate.c
+++ b/lib/tls13/certificate.c
@@ -676,7 +676,7 @@ static int decompress_certificate(gnutls_session_t session,
                return gnutls_assert_val(GNUTLS_E_UNEXPECTED_PACKET_LENGTH);
 
        ret = _gnutls_buffer_pop_datum_prefix24(buf, &comp);
-       if (ret < 0 || buf->length > 0)
+       if (ret < 0 || buf->length > 0 || comp.size == 0)
                return gnutls_assert_val(GNUTLS_E_UNEXPECTED_PACKET_LENGTH);
 
        plain.data = gnutls_malloc(plain_exp_len);