From b3e3ab61c02f7e99306a5555993baba4ceb58311 Mon Sep 17 00:00:00 2001
From: Frank Morgner <frankmorgner@gmail.com>
Date: Thu, 21 Jun 2018 15:15:38 +0200
Subject: [PATCH] avoid integer underflow

---
 src/tools/pkcs11-tool.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c
index d97683bc..84e6bf5d 100644
--- a/src/tools/pkcs11-tool.c
+++ b/src/tools/pkcs11-tool.c
@@ -4687,7 +4687,8 @@ static int test_signature(CK_SESSION_HANDLE sess)
 	data[0] = 0x00;
 	data[1] = 0x01;
 	memset(data + 2, 0xFF, dataLen - 3 - dataLens[1]);
-	data[dataLen - 36] = 0x00;
+	if (dataLen >= 36)
+		data[dataLen - 36] = 0x00;
 	memcpy(data + (dataLen - dataLens[1]), datas[1], dataLens[1]);
 	datas[0] = data;
 	dataLens[0] = dataLen;