(temp) parse length constraint

Author: mdb-ad

kms-message/src/kms_kmip_response_parser.c

@@ -105,8 +105,7 @@ kms_kmip_response_parser_feed (kms_kmip_response_parser_t *parser,
       uint32_t temp;
       memcpy (&temp, parser->buf->str + FIRST_LENGTH_OFFSET, sizeof (uint32_t));
       parser->first_len = KMS_UINT32_FROM_BE (temp);
-      if (parser->first_len >
-          UINT32_MAX - KMS_KMIP_RESPONSE_PARSER_FIRST_LENGTH) {
+      if (parser->first_len > (uint32_t) INT32_MAX) {
          KMS_ERROR (parser, "KMIP response length field too large");
          return false;
       }