CryptoPkg: Fix the pkcs7 get cert fuzz

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
tianocore · Mar 19, 2024 · 397fb1b · 397fb1b
1 parent 9c3a481
commit 397fb1b
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/CryptoPkg/Library/BaseCryptLibMbedTls/Pk/CryptPkcs7VerifyCommon.c b/CryptoPkg/Library/BaseCryptLibMbedTls/Pk/CryptPkcs7VerifyCommon.c
@@ -470,6 +470,10 @@ Pkcs7GetSignedData (
     goto End;
   }
 
+  if (CertNum != 0) {
+    FreePool (MoreCert);
+  }
+
   LastCert = &(SignedData->Certificates);
 
   while (CertNum--) {
@@ -487,8 +491,10 @@ Pkcs7GetSignedData (
     Ret = MbedTlsPkcs7GetSignersInfoSet (&P, End, &SignedData->SignerInfos);
   }
 
+  return Ret;
+
 End:
-  if (MoreCert != NULL) {
+  if ((MoreCert != NULL) && (CertNum !=0)) {
     FreePool (MoreCert);
     MoreCert = NULL;
   }