More precise length check in _asn1_get_indefinite_length_string().

diff --git a/lib/decoding.c b/lib/decoding.c
index 813afc0..0e5077f 100644 (file)
--- a/lib/decoding.c
+++ b/lib/decoding.c
@@ -772,7 +772,7 @@ _asn1_get_indefinite_length_string (const unsigned char *der, int *len)
 
   while (1)
     {
-      if ((*len) < counter)
+      if (counter+1 >= *len)
        return ASN1_DER_ERROR;
 
       if ((der[counter] == 0) && (der[counter + 1] == 0))