add int size checks

Author: phbnf

internal/types/tls/tls.go

@@ -22,6 +22,7 @@ import (
 	"bytes"
 	"encoding/binary"
 	"fmt"
+	"math"
 	"reflect"
 	"strconv"
 	"strings"
@@ -295,6 +296,9 @@ func readVarUint(data []byte, info *fieldInfo) (uint64, error) {
 	if info == nil || !info.countSet {
 		return 0, structuralError{info.fieldName(), "no field size information available"}
 	}
+	if info.count > math.MaxInt {
+		return 0, syntaxError{info.fieldName(), "count > math.MaxInt"}
+	}
 	if len(data) < int(info.count) {
 		return 0, syntaxError{info.fieldName(), "truncated variable-length integer"}
 	}
@@ -365,6 +369,9 @@ func parseField(v reflect.Value, data []byte, initOffset int, info *fieldInfo) (
 			return offset, err
 		}
 		v.SetUint(val)
+		if info.count > math.MaxInt {
+			return offset, syntaxError{info.fieldName(), "count > math.MaxInt"}
+		}
 		offset += int(info.count)
 		return offset, nil
 	case reflect.Struct:
@@ -468,7 +475,13 @@ func parseField(v reflect.Value, data []byte, initOffset int, info *fieldInfo) (
 		if err != nil {
 			return offset, err
 		}
+		if varlen > math.MaxInt {
+			return offset, syntaxError{info.fieldName(), "varlen > math.MaxInt"}
+		}
 		datalen := int(varlen)
+		if info.count > math.MaxInt {
+			return offset, syntaxError{info.fieldName(), "count > math.MaxInt"}
+		}
 		offset += int(info.count)
 		rest = rest[info.count:]