Fix integer overflow in digest parsing (#211)

google · Apr 13, 2021 · 31ad4f5 · 31ad4f5
1 parent b89180c
commit 31ad4f5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/attest/eventlog.go b/attest/eventlog.go
@@ -712,7 +712,7 @@ func parseRawEvent2(r *bytes.Buffer, specID *specIDEvent) (event rawEvent, err e
 			if alg.ID != algID {
 				continue
 			}
-			if uint16(r.Len()) < alg.Size {
+			if r.Len() < int(alg.Size) {
 				return event, fmt.Errorf("reading digest: %v", io.ErrUnexpectedEOF)
 			}
 			digest.data = make([]byte, alg.Size)