Corrected an off-by-one error.

The issue was discovered using the codenomicon TLS suite.

diff --git a/lib/decoding.c b/lib/decoding.c
index 0b334fe..16f202a 100644 (file)
--- a/lib/decoding.c
+++ b/lib/decoding.c
@@ -149,7 +149,7 @@ asn1_get_tag_der (const unsigned char *der, int der_len,
       /* Long form */
       punt = 1;
       ris = 0;
-      while (punt <= der_len && der[punt] & 128)
+      while (punt < der_len && der[punt] & 128)
        {
 
          if (INT_MULTIPLY_OVERFLOW (ris, 128))