From 0b8ff3ce6a3aeaef600384df7db7a96c20ae9aff Mon Sep 17 00:00:00 2001 From: aj Date: Sun, 28 Mar 2004 20:30:58 +0000 Subject: [PATCH] it is legal to read all bytes of the file (e.g. offset 0, len 10, fil->len 10). Bug found by Antonio Iacono. git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1758 c6295689-39f2-0310-b995-f0e70906c6a9 --- src/libopensc/pkcs15.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libopensc/pkcs15.c b/src/libopensc/pkcs15.c index fc99256b..e197fd90 100644 --- a/src/libopensc/pkcs15.c +++ b/src/libopensc/pkcs15.c @@ -1218,7 +1218,7 @@ int sc_pkcs15_read_file(struct sc_pkcs15_card *p15card, len = path->count; /* Make sure we're within proper bounds */ if (offset >= file->size - || offset + len >= file->size) { + || offset + len > file->size) { r = SC_ERROR_INVALID_ASN1_OBJECT; goto fail_unlock; }