diff options
| author | Werner Koch <[email protected]> | 2025-03-06 16:17:17 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2025-03-06 16:17:17 +0000 |
| commit | d3d7713c1799754160260cb350309dd183b397f5 (patch) | |
| tree | 35f2c0ca3b27c2e25dd97d8180a1e7c64776bf4c /g10/packet.h | |
| parent | dirmngr: Use the same thread init strategy as gpg-agent et al. (diff) | |
| download | gnupg-d3d7713c1799754160260cb350309dd183b397f5.tar.gz gnupg-d3d7713c1799754160260cb350309dd183b397f5.zip | |
gpg: Fix regression for the recent malicious subkey DoS fix.
* g10/packet.h (PUBKEY_USAGE_VERIFY): New.
* g10/getkey.c (get_pubkey_for_sig): Pass new flag also to requested
usage.
(finish_lookup): Introduce a verify_mode.
--
Fixes-commit: 48978ccb4e20866472ef18436a32744350a65158
GnuPG-bug-id: 7547
Diffstat (limited to 'g10/packet.h')
| -rw-r--r-- | g10/packet.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/g10/packet.h b/g10/packet.h index 6be7f207c..29e58d2df 100644 --- a/g10/packet.h +++ b/g10/packet.h @@ -60,6 +60,7 @@ #define PUBKEY_USAGE_RENC 1024 /* Restricted encryption. */ #define PUBKEY_USAGE_TIME 2048 /* Timestamp use. */ +#define PUBKEY_USAGE_VERIFY 16384 /* Verify only modifier. */ /* The usage bits which can be derived from the algo. */ #define PUBKEY_USAGE_BASIC_MASK (PUBKEY_USAGE_SIG|PUBKEY_USAGE_ENC\ |