These can cause segfaults; see the included test cases for details. I know the internal parser is deprecated, but hopefully a segfault-triggering bug is still worth fixing. You can view, comment on, or merge this pull request online at:
https://github.com/rpm-software-management/rpm/pull/2242 -- Commit Summary -- * Avoid type confusion when verifying signatures * Check packet types of signatures and public keys * Reject multiple PGPTAG_PUBLIC_KEY packets -- File Changes -- M rpmio/rpmpgp_internal.c (33) A tests/data/keys/type-confusion.asc (29) M tests/rpmsigdig.at (12) -- Patch Links -- https://github.com/rpm-software-management/rpm/pull/2242.patch https://github.com/rpm-software-management/rpm/pull/2242.diff -- Reply to this email directly or view it on GitHub: https://github.com/rpm-software-management/rpm/pull/2242 You are receiving this because you are subscribed to this thread. Message ID: <rpm-software-management/rpm/pull/[email protected]>
_______________________________________________ Rpm-maint mailing list [email protected] http://lists.rpm.org/mailman/listinfo/rpm-maint
