Why a DER length is checked against its parent, not the buffer

A length field is the first place two readers of the same certificate start to disagree. Before a single content byte gets examined, the length bytes already admit several readings: an indefinite marker, a long form carrying a small count, a byte X.690 reserves, a count that reaches past the element it sits in. Each lenient answer hands you a... Weiterlesen: Why a DER length is checked against its parent, not the buffer