Fix KEMRecipientInfo sequence size restriction

peterdettman · peterdettman · commit f436c8ec9167 · 2024-05-16T12:39:28.000+07:00
diff --git a/util/src/main/java/org/bouncycastle/asn1/cms/KEMRecipientInfo.java b/util/src/main/java/org/bouncycastle/asn1/cms/KEMRecipientInfo.java
@@ -74,9 +74,9 @@ else if (o != null)
 
     private KEMRecipientInfo(ASN1Sequence seq)
     {
-        if (seq.size() != 3)
+        if (seq.size() < 8 || seq.size() > 9)
         {
-            throw new IllegalArgumentException("sequence must consist of 3 elements");
+            throw new IllegalArgumentException("Bad sequence size: " + seq.size());
         }
 
         cmsVersion = ASN1Integer.getInstance(seq.getObjectAt(0));

Original file line number	Diff line number	Diff line change
`@@ -74,9 +74,9 @@ else if (o != null)`
`74`	`74`
`75`	`75`	`private KEMRecipientInfo(ASN1Sequence seq)`
`76`	`76`	`{`
`77`		`- if (seq.size() != 3)`
	`77`	`+ if (seq.size() < 8 \|\| seq.size() > 9)`
`78`	`78`	`{`
`79`		`- throw new IllegalArgumentException("sequence must consist of 3 elements");`
	`79`	`+ throw new IllegalArgumentException("Bad sequence size: " + seq.size());`
`80`	`80`	`}`
`81`	`81`
`82`	`82`	`cmsVersion = ASN1Integer.getInstance(seq.getObjectAt(0));`