AuroraMiddleware/qt5base-lts
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge "QAsn1Element: Avoid overflow in QAsn1Element::toInteger"

Browse Source
This commit is contained in:
Robert Löhning 2021-02-01 17:57:40 +01:00 committed by Qt CI Bot
commit 2b9bc46670
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/network/ssl/qasn1element.cpp
View File

@ -327,8 +327,9 @@ qint64 QAsn1Element::toInteger(bool *ok) const
return 0;
}
// NOTE: negative numbers are not handled
if (mValue.at(0) & 0x80) {
// NOTE: - negative numbers are not handled
// - greater sizes would overflow
if (mValue.at(0) & 0x80 || mValue.size() > 8) {
if (ok)
*ok = false;
return 0;