From f9c30b39f28f25c7da462fe16d989c2050dee2a7 Mon Sep 17 00:00:00 2001
From: Nick Bastin <nick.bastin@gmail.com>
Date: Thu, 17 Dec 2015 05:28:49 -0800
Subject: Avoid IndexError on too-short OIDs, add test for regression

---
 src/cryptography/x509/oid.py | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src')

diff --git a/src/cryptography/x509/oid.py b/src/cryptography/x509/oid.py
index ba77a8b8..f5dc2f81 100644
--- a/src/cryptography/x509/oid.py
+++ b/src/cryptography/x509/oid.py
@@ -26,6 +26,11 @@ class ObjectIdentifier(object):
                     "Malformed OID: %s (non-integer nodes)" % (
                         self._dotted_string))
 
+        if len(nodes) < 2:
+            raise ValueError(
+                "Malformed OID: %s (insufficient number of nodes)" % (
+                    self._dotted_string)
+
         if intnodes[0] > 2:
             raise ValueError(
                 "Malformed OID: %s (first node outside valid range)" % (
-- 
cgit v1.2.3