Merge pull request #159 from Zondax/improve_cbor_parser

Improve cbor parser

app/Makefile

@@ -56,7 +56,7 @@ endif
 
 APPVERSION_M=2
 APPVERSION_N=0
-APPVERSION_P=5
+APPVERSION_P=6
 
 $(info COIN  = [$(COIN)])
 

deps/tinycbor/src/cborparser.c

@@ -391,13 +391,24 @@ uint64_t _cbor_value_decode_int64_internal(const CborValue *value)
  */
 CborError cbor_parser_init(const uint8_t *buffer, size_t size, uint32_t flags, CborParser *parser, CborValue *it)
 {
+    #ifdef __SIZEOF_INT128__
+        if ((UINT64_MAX - (uint64_t) buffer < (uint64_t) size)) {
+            return CborErrorUnknownLength;
+        }
+    #else
+        if (((uint64_t) size + (uint64_t) buffer) > UINT32_MAX) {
+            return CborErrorUnknownLength;
+        }
+    #endif
+
     memset(parser, 0, sizeof(*parser));
     parser->end = buffer + size;
     parser->flags = flags;
     it->parser = parser;
     it->ptr = buffer;
     it->remaining = 1;      /* there's one type altogether, usually an array or map */
     it->flags = 0;
+
     return preparse_value(it);
 }