Changeset 57574 in vbox

Timestamp:

Aug 28, 2015 2:29:51 AM (9 years ago)

Author:

vboxsync

Message:

rtCrx509TbsCertificate_AddKeyUsageFlags: Fix assertion.

File:

• trunk/src/VBox/Runtime/common/crypto/x509-core.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/common/crypto/x509-core.cpp

@@ -1251 +1251 @@
 {
     AssertReturnVoid(pExtension->enmValue == RTCRX509EXTENSIONVALUE_BIT_STRING);
-    AssertReturnVoid(pExtension->ExtnValue.pEncapsulated->cb <= 2);
+    /* 3 = 1 byte for unused bit count, followed by one or two bytes containing actual bits. RFC-5280 defines bits 0 thru 8. */
+    AssertReturnVoid(pExtension->ExtnValue.pEncapsulated->cb <= 3);
     pThis->T3.fKeyUsage |= (uint32_t)RTAsn1BitString_GetAsUInt64((PCRTASN1BITSTRING)pExtension->ExtnValue.pEncapsulated);
 }