From 026ff00e7da02af4c0e5f40da7fb5a7152e3205a Mon Sep 17 00:00:00 2001
From: Armin Novak <armin.novak@thincast.com>
Date: Tue, 21 Aug 2018 09:08:33 +0200
Subject: [PATCH] Fixed #4806 broken bounds check.

---
 libfreerdp/crypto/tls.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libfreerdp/crypto/tls.c b/libfreerdp/crypto/tls.c
index c7c174b..de889cf 100644
--- a/libfreerdp/crypto/tls.c
+++ b/libfreerdp/crypto/tls.c
@@ -1260,7 +1260,7 @@ static BOOL tls_extract_pem(CryptoCert cert, BYTE** PublicKey, DWORD* PublicKeyL
 
 		length = new_len;
 		pemCert = new_cert;
-		status = BIO_read(bio, &pemCert[offset], length);
+		status = BIO_read(bio, &pemCert[offset], length - offset);
 
 		if (status < 0)
 			break;
-- 
2.7.4