Long tag form must not contain zero byte

[pyderasn.git] / pyderasn.py

diff --git a/pyderasn.py b/pyderasn.py
index 15ca386b89894c7c4278fc2914f5ca9c3b44e199..df0eb8f2cabaa46430590bf1bbeeedc231e36d66 100755 (executable)
--- a/pyderasn.py
+++ b/pyderasn.py
@@ -1201,7 +1201,7 @@ except ImportError:  # pragma: no cover
     def colored(what, *args, **kwargs):
         return what
 
-__version__ = "7.6"
+__version__ = "7.7"
 
 __all__ = (
     "agg_octet_string",
@@ -1558,6 +1558,8 @@ def tag_strip(data):
             raise DecodeError("unfinished tag")
         if indexbytes(data, i) & 0x80 == 0:
             break
+    if i > 1 and indexbytes(data, 1) & 0x7F == 0:
+        raise DecodeError("leading zero byte in tag value")
     i += 1
     return data[:i], i, data[i:]