Security-55471.14.8.tar.gz

[apple/security.git] / libsecurity_codesigning / lib / reqreader.h

diff --git a/libsecurity_codesigning/lib/reqreader.h b/libsecurity_codesigning/lib/reqreader.h
index 2db501b463af5087f544a593f5ebdde501470f81..25d198dbf2808bdc25cd0a4e87916b9f74aff68c 100644 (file)
--- a/libsecurity_codesigning/lib/reqreader.h
+++ b/libsecurity_codesigning/lib/reqreader.h
@@ -56,7 +56,7 @@ public:
 protected:
        void checkSize(size_t length)
        {
-               if (mPC + length > mReq->length())
+               if (mPC + length < mPC || mPC + length > mReq->length())
                        MacOSError::throwMe(errSecCSReqInvalid);
        }