From 4f3b6264b2020dd831aec073369238749167149e Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Mon, 2 Jun 2014 10:49:55 +0200
Subject: [PATCH] Add a sanity check in asn1_der_decoding_startEnd()

---
 lib/decoding.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/decoding.c b/lib/decoding.c
index 8f6fe8a..54f0167 100644
--- a/lib/decoding.c
+++ b/lib/decoding.c
@@ -1581,6 +1581,9 @@ asn1_der_decoding_startEnd (asn1_node element, const void *ider, int ider_len,
       *end = node_to_find->end;
     }
 
+  if (*end < *start)
+    return ASN1_GENERIC_ERROR;
+
   return ASN1_SUCCESS;
 }
 
-- 
2.7.4