Handle DER with trailer field in PSS parameters

Signed-off-by: Alexander Scheel <[email protected]>
dogtagpki · Apr 3, 2020 · 64b8fc7 · 64b8fc7
1 parent 8107b46
commit 64b8fc7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/org/mozilla/jss/provider/java/security/RSAPSSAlgorithmParameters.java b/org/mozilla/jss/provider/java/security/RSAPSSAlgorithmParameters.java
@@ -124,7 +124,7 @@ private void decode(DerInputStream in , byte[] encoded) throws IOException {
         // Sequence has 3 members, trailer field ignored
         DerValue seq[] = in.getSequence(3);
 
-        if(seq.length != 3) {
+        if(seq.length < 3 || seq.length > 4) {
             throw new IOException("Invalid data!");
         }