From 63b5e216f8fcaff0f6b87bb05ffd5631158ac3c4 Mon Sep 17 00:00:00 2001
From: Jonathan Winzig <jwinzig@hilscher.com>
Date: Tue, 9 Jan 2024 15:20:03 +0100
Subject: [PATCH] Fix Issue #8687

Signed-off-by: Jonathan Winzig <jwinzig@hilscher.com>
---
 library/x509_create.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/library/x509_create.c b/library/x509_create.c
index 5e732d67f..2c17cb10c 100644
--- a/library/x509_create.c
+++ b/library/x509_create.c
@@ -380,6 +380,10 @@ int mbedtls_x509_set_extension(mbedtls_asn1_named_data **head, const char *oid,
 {
     mbedtls_asn1_named_data *cur;
 
+    if (0xFFFFFFFF == (uint32_t) val_len) {
+        return MBEDTLS_ERR_X509_BAD_INPUT_DATA;
+    }
+
     if ((cur = mbedtls_asn1_store_named_data(head, oid, oid_len,
                                              NULL, val_len + 1)) == NULL) {
         return MBEDTLS_ERR_X509_ALLOC_FAILED;