add check for high tag number

kanren3 · kanren3 · commit c294c4078ecb · 2025-11-16T22:30:06.000+08:00
diff --git a/library/asn1parse.c b/library/asn1parse.c
@@ -66,6 +66,10 @@ int mbedtls_asn1_get_tag(unsigned char **p,
         return MBEDTLS_ERR_ASN1_OUT_OF_DATA;
     }
 
+    if (MBEDTLS_ASN1_TAG_VALUE_MASK == (**p & MBEDTLS_ASN1_TAG_VALUE_MASK)) {
+        return MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
+    }
+
     if (**p != tag) {
         return MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;
     }

Original file line number	Diff line number	Diff line change
`@@ -66,6 +66,10 @@ int mbedtls_asn1_get_tag(unsigned char **p,`
`66`	`66`	`return MBEDTLS_ERR_ASN1_OUT_OF_DATA;`
`67`	`67`	`}`
`68`	`68`
	`69`	`+ if (MBEDTLS_ASN1_TAG_VALUE_MASK == (**p & MBEDTLS_ASN1_TAG_VALUE_MASK)) {`
	`70`	`+ return MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;`
	`71`	`+ }`
	`72`	`+`
`69`	`73`	`if (**p != tag) {`
`70`	`74`	`return MBEDTLS_ERR_ASN1_UNEXPECTED_TAG;`
`71`	`75`	`}`