diff --git a/library/x509_crt.c b/library/x509_crt.c index c539022fa5..c4bb3aebf8 100644 --- a/library/x509_crt.c +++ b/library/x509_crt.c @@ -1749,11 +1749,6 @@ static int x509_get_other_name(const mbedtls_x509_buf *subject_alt_name, return MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE; } - if (p + len >= end) { - mbedtls_platform_zeroize(other_name, sizeof(*other_name)); - return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, - MBEDTLS_ERR_ASN1_LENGTH_MISMATCH); - } p += len; if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_CONTEXT_SPECIFIC)) != @@ -1774,11 +1769,6 @@ static int x509_get_other_name(const mbedtls_x509_buf *subject_alt_name, other_name->value.hardware_module_name.oid.p = p; other_name->value.hardware_module_name.oid.len = len; - if (p + len >= end) { - mbedtls_platform_zeroize(other_name, sizeof(*other_name)); - return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, - MBEDTLS_ERR_ASN1_LENGTH_MISMATCH); - } p += len; if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_OCTET_STRING)) != 0) { @@ -1790,8 +1780,6 @@ static int x509_get_other_name(const mbedtls_x509_buf *subject_alt_name, other_name->value.hardware_module_name.val.len = len; p += len; if (p != end) { - mbedtls_platform_zeroize(other_name, - sizeof(*other_name)); return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS, MBEDTLS_ERR_ASN1_LENGTH_MISMATCH); }