diff options
| author | Werner Koch <[email protected]> | 2024-09-19 08:00:24 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2024-09-19 08:06:55 +0000 |
| commit | 2770efa75b7666ac57cc29089ab988f61cd246c3 (patch) | |
| tree | f6b2ec9231d1a1142ae30429e85b29035bcde435 /g10/t-keydb-get-keyblock.c | |
| parent | agent: Fix detection of the trustflag de-vs. (diff) | |
| download | gnupg-2770efa75b7666ac57cc29089ab988f61cd246c3.tar.gz gnupg-2770efa75b7666ac57cc29089ab988f61cd246c3.zip | |
gpg: Avoid wrong decryption_failed for signed+OCB msg w/o pubkey.
* g10/decrypt-data.c (struct decode_filter_context_s): Add flag
checktag_failed.
(aead_checktag): Set flag.
(decrypt_data): Initially clear that flag and check the flag after the
decryption.
* g10/mainproc.c (proc_encrypted): Revert the log_get_errorcount based
check.
--
This fixes a bug where for an OCB encrypted and signed message with
the signing key missing during decryption the DECRYPTION_FAILED status
line was printed along with "WARNING: encrypted message has been
manipulated". This was because we use log_error to show that the
signature could not be verified due to the missing pubkey; the
original fix looked at the error counter and thus triggered the
decryption failed status.
Fixes-commit: 50e81ad38d2b5a5028fa6815da358c0496aa927e
GnuPG-bug-id: 7042
Diffstat (limited to 'g10/t-keydb-get-keyblock.c')
0 files changed, 0 insertions, 0 deletions