ndn_signature_value_tlv_decode buffer overflow

[yoursunny]

As of a2891e9, ndn_signature_value_tlv_decode function invokes:

decoder_get_length(decoder, &signature->sig_size);
decoder_get_raw_buffer_value(decoder, signature->sig_value, signature->sig_size);

signature->sig_value is a fixed size buffer. signature->sig_size comes from network and the function does not check whether it exceeds the buffer capacity.
Therefore, an attacker can trigger a buffer overflow using this function.

[tianyuan129]

Commit 1097c03 will address this problem. Thank you for pointing this out.