Fix wolfSSL_sk_X509_OBJECT_deep_copy to check CTC_MAX_SKID_SIZE

Author: embhorn

src/x509.c

@@ -11711,14 +11711,33 @@ WOLF_STACK_OF(WOLFSSL_X509_OBJECT)* wolfSSL_sk_X509_OBJECT_deep_copy(
             cert->isCA = req->isCa;
             cert->basicConstSet = req->basicConstSet;
     #ifdef WOLFSSL_CERT_EXT
-            if (req->subjKeyIdSz != 0) {
-                XMEMCPY(cert->skid, req->subjKeyId, req->subjKeyIdSz);
-                cert->skidSz = (int)req->subjKeyIdSz;
+            if (req->subjKeyIdSz > CTC_MAX_SKID_SIZE) {
+                WOLFSSL_MSG("Subject Key ID too large");
+                WOLFSSL_ERROR_VERBOSE(BUFFER_E);
+                cert->skidSz = 0;
+                ret = WOLFSSL_FAILURE;
+            }
+            else if (req->subjKeyIdSz > 0) {
+                if (req->subjKeyId == NULL) {
+                    WOLFSSL_MSG("Subject Key ID missing");
+                    WOLFSSL_ERROR_VERBOSE(BAD_FUNC_ARG);
+                    cert->skidSz = 0;
+                    ret = WOLFSSL_FAILURE;
+                }
+                else {
+                    XMEMCPY(cert->skid, req->subjKeyId, req->subjKeyIdSz);
+                    cert->skidSz = (int)req->subjKeyIdSz;
+                }
+            }
+            else {
+                cert->skidSz = 0;
             }
-            if (req->keyUsageSet)
-                cert->keyUsage = req->keyUsage;
+            if (ret == WOLFSSL_SUCCESS) {
+                if (req->keyUsageSet)
+                    cert->keyUsage = req->keyUsage;
 
-            cert->extKeyUsage = req->extKeyUsage;
+                cert->extKeyUsage = req->extKeyUsage;
+            }
     #endif
 
             XMEMCPY(cert->challengePw, req->challengePw, CTC_NAME_SIZE);