aboutsummaryrefslogtreecommitdiffstats
path: root/g10/packet.h
diff options
context:
space:
mode:
authorWerner Koch <[email protected]>2025-03-06 16:17:17 +0000
committerWerner Koch <[email protected]>2025-03-06 16:17:17 +0000
commitd3d7713c1799754160260cb350309dd183b397f5 (patch)
tree35f2c0ca3b27c2e25dd97d8180a1e7c64776bf4c /g10/packet.h
parentdirmngr: Use the same thread init strategy as gpg-agent et al. (diff)
downloadgnupg-d3d7713c1799754160260cb350309dd183b397f5.tar.gz
gnupg-d3d7713c1799754160260cb350309dd183b397f5.zip
gpg: Fix regression for the recent malicious subkey DoS fix.
* g10/packet.h (PUBKEY_USAGE_VERIFY): New. * g10/getkey.c (get_pubkey_for_sig): Pass new flag also to requested usage. (finish_lookup): Introduce a verify_mode. -- Fixes-commit: 48978ccb4e20866472ef18436a32744350a65158 GnuPG-bug-id: 7547
Diffstat (limited to '')
-rw-r--r--g10/packet.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/g10/packet.h b/g10/packet.h
index 6be7f207c..29e58d2df 100644
--- a/g10/packet.h
+++ b/g10/packet.h
@@ -60,6 +60,7 @@
#define PUBKEY_USAGE_RENC 1024 /* Restricted encryption. */
#define PUBKEY_USAGE_TIME 2048 /* Timestamp use. */
+#define PUBKEY_USAGE_VERIFY 16384 /* Verify only modifier. */
/* The usage bits which can be derived from the algo. */
#define PUBKEY_USAGE_BASIC_MASK (PUBKEY_USAGE_SIG|PUBKEY_USAGE_ENC\