summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client/main.c
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2023-05-30 11:09:09 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2023-05-30 11:09:09 +0000
commit51e1328c3ddf8f68db9d52f3925e648f22fc47d6 (patch)
tree0d2b05e53041c9bf8ffa7a2c480d3bd8c6664d3f /usr.sbin/rpki-client/main.c
parent76c72a1a965a52d3819fd98aaf54b241bd846e30 (diff)
Use error check to ensure we have SignedData in CMS
CMS_get0_SignerInfos() only returns a non-NULL pointer if the CMS object contains SignedData. The subsequent assert can trigger if we parse an object that is not of this type. Nothing ensures this up to this point, so we have no way of knowing that the assertion is actually true. If we get a CMS object without SignedData, we should ignore it, not abort the rpki-client run. With this check in place it is also clear that we actually check point 1a of the list of things to check in RFC 6488, section 3. ok claudio job
Diffstat (limited to 'usr.sbin/rpki-client/main.c')
0 files changed, 0 insertions, 0 deletions