openharmony/kernel_linux_common_modules
1
0
Fork 0
mirror of https://github.com/openharmony/kernel_linux_common_modules.git synced 2026-08-27 01:31:36 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix: fix logic defects in certificate chain length calculation

Browse Source 
1.Avoid infinite loops caused by circular certificate chains.

2.Prevent potential integer overflow issues.

Signed-off-by: Guo Yitao <414989582@qq.com>
This commit is contained in:
Guo Yitao
2026-02-26 14:19:25 +08:00
parent 57a2e8f3f7
commit 7e33971722
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code_sign/verify_cert_chain.c
+3
View File
@@ -195,6 +195,9 @@ void code_sign_verify_certchain(const void *raw_pkcs7, size_t pkcs7_len,
break;
}
cert_chain_depth_without_root++;
if (cert_chain_depth_without_root > (source->max_path_depth - 1)) {
break;
}
// search again for current issuer's issuer
issuer = cert->issuer;
cert = pkcs7->certs;