Fix coverity tainted scalar
|uclen| is created from three byte values, so this seems a bit
redundant, but if it makes coverity happy
@@ -1345,7 +1345,8 @@ static int ssl_print_compressed_certificates(BIO *bio, const SSL_CONNECTION *sc,
if (!ossl_comp_has_alg(alg))
return 0;
- if (uclen == 0 || (ucdata = OPENSSL_malloc(uclen)) == NULL)
+ /* Check against certificate maximum size (coverity) */
+ if (uclen == 0 || uclen > 0xFFFFFF || (ucdata = OPENSSL_malloc(uclen)) == NULL)
return 0;
switch (alg) {
