Add a sanity check in asn1_der_decoding_startEnd()

diff --git a/lib/decoding.c b/lib/decoding.c
index 8f6fe8a..54f0167 100644 (file)
--- a/lib/decoding.c
+++ b/lib/decoding.c
@@ -1581,6 +1581,9 @@ asn1_der_decoding_startEnd (asn1_node element, const void *ider, int ider_len,
       *end = node_to_find->end;
     }
 
+  if (*end < *start)
+    return ASN1_GENERIC_ERROR;
+
   return ASN1_SUCCESS;
 }