diff options
Diffstat (limited to '')
| -rw-r--r-- | g10/parse-packet.c | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/g10/parse-packet.c b/g10/parse-packet.c index 58cb1c45e..1de7307f1 100644 --- a/g10/parse-packet.c +++ b/g10/parse-packet.c @@ -1387,10 +1387,12 @@ can_handle_critical (const byte * buffer, size_t n, int type) { case SIGSUBPKT_NOTATION: if (n >= 8) - return can_handle_critical_notation (buffer + 8, - (buffer[4] << 8) | buffer[5]); - else - return 0; + { + size_t notation_len = ((buffer[4] << 8) | buffer[5]); + if (n - 8 >= notation_len) + return can_handle_critical_notation (buffer + 8, notation_len); + } + return 0; case SIGSUBPKT_SIGNATURE: case SIGSUBPKT_SIG_CREATED: case SIGSUBPKT_SIG_EXPIRE: |