Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5346da02 authored by Tianjie Xu's avatar Tianjie Xu Committed by android-build-merger
Browse files

DO NOT MERGE: Add a checker for signature boundary in verifier 

am: f616da17

Change-Id: I05a1a6775229a1041e1a93388a86262d36d6581b
parents 86a28d0a f616da17

verifier.cpp

+7 −0
Original line number Diff line number Diff line
@@ -79,6 +79,13 @@ int verify_file(const char* path, const Certificate* pKeys, unsigned int numKeys 
    LOGI("comment is %d bytes; signature %d bytes from end\n",

         comment_size, signature_start);



    if (signature_start > comment_size) {

        LOGE("signature start: %zu is larger than comment size: %zu\n", signature_start,

             comment_size);

        fclose(f);

        return VERIFY_FAILURE;

    }



    if (signature_start - FOOTER_SIZE < RSANUMBYTES) {

        // "signature" block isn't big enough to contain an RSA block.

        LOGE("signature is too short\n");