Bug 151940: SEC_PKCS12DecoderVerify should call SEC_ASN1DecoderFinish first

to detect insufficient input data error.
This commit is contained in:
wtc%netscape.com 2002-06-18 05:00:39 +00:00
parent 5990fee38b
commit 29df488eaa

View File

@ -1408,6 +1408,12 @@ SEC_PKCS12DecoderVerify(SEC_PKCS12DecoderContext *p12dcx)
return SECFailure;
}
rv = SEC_ASN1DecoderFinish(p12dcx->pfxDcx);
p12dcx->pfxDcx = NULL;
if(rv != SECSuccess) {
return rv;
}
/* check the signature or the mac depending on the type of
* integrity used.
*/