X509: really looong base64 encoded strings broke extractBER()

phpseclib · Jul 17, 2020 · d077c7b · d077c7b · terrafrost · Jul 17, 2020
1 parent d8e39b0
commit d077c7b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/phpseclib/File/X509.php b/phpseclib/File/X509.php
@@ -5144,7 +5144,9 @@ function _extractBER($str)
          * subject=/O=organization/OU=org unit/CN=common name
          * issuer=/O=organization/CN=common name
          */
-        $temp = preg_replace('#.*?^-+[^-]+-+[\r\n ]*$#ms', '', $str, 1);
+        $temp = strlen($str) <= ini_get('pcre.backtrack_limit') ?
+            preg_replace('#.*?^-+[^-]+-+[\r\n ]*$#ms', '', $str, 1) :
+            $str;
         // remove the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- stuff
         $temp = preg_replace('#-+[^-]+-+#', '', $temp);
         // remove new lines