Tadeusz Struk <tadeusz.st...@intel.com> wrote: > + if (memcmp(sig->digest, output, sig->digest_size) ||
I've added " != 0" after the memcmp(). > + req->dst_len != sig->digest_size) > + ret = -EBADMSG; Btw, this has to be -EKEYREJECTED; -EBADMSG would indicate that the container is unparseable. I wonder if we should propose a -ESIGREJECTED error... David
