diff options
| author | Werner Koch <[email protected]> | 2025-10-22 09:19:55 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2025-10-22 09:20:10 +0000 |
| commit | db9705ef594d5a2baf0e95e13cf6170b621dfc51 (patch) | |
| tree | 6e3af30eb515254fae7fc818d09ddb7917ddbe17 /g10/parse-packet.c | |
| parent | gpg,gpgsm: Serialize write access to keybox/keyring to protect. (diff) | |
| download | gnupg-db9705ef594d5a2baf0e95e13cf6170b621dfc51.tar.gz gnupg-db9705ef594d5a2baf0e95e13cf6170b621dfc51.zip | |
gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures.
* g10/sig-check.c (check_signature_over_key_or_uid): Always initialize
IS_SELFSIG because it is later used to detect SHA1 non-selfsignatures.
--
The value of is_selfsig was also used to decide whether to reject a a
SHA_signature if it is not a self-signature. However, a code path
exists where is_selfsig was set to stub_is_selfsig and not initilaized
in this case.
Fixes-commit: c4f2d9e3e1d77d2f1f168764fcdfed32f7d1dfc4
Reported-by: 8b79fe4dd0581c1cd000e1fbecba9f39e16a396a
Diffstat (limited to 'g10/parse-packet.c')
0 files changed, 0 insertions, 0 deletions