length check added.

diff --git a/lib/silccrypt/pkcs1.c b/lib/silccrypt/pkcs1.c
index 9b596d9b93203616280a11db6a26dfd85eceb209..98963739d8565565e05cb5624b4f41107449e0c6 100644 (file)
--- a/lib/silccrypt/pkcs1.c
+++ b/lib/silccrypt/pkcs1.c
@@ -256,6 +256,9 @@ RSA_DecodeOneBlock(unsigned char *data,
     if (blockType != bt)
       return NULL;
 
+    if (modulusLen < 2 + 1)
+      return NULL;
+
     dp += 2;
 
     switch (blockType) {