diff options
| author | Tianjie Xu <xunchang@google.com> | 2017-01-18 23:26:47 +0100 |
|---|---|---|
| committer | android-build-merger <android-build-merger@google.com> | 2017-01-18 23:26:47 +0100 |
| commit | d3d5e54a45eccac59eb72d5becfa9e320403b4f5 (patch) | |
| tree | 46baf45a74a9620f7b019239dc3fca7942d462b7 | |
| parent | resolve merge conflicts of 86a28d0 to klp-modular-dev am: a5bc59620f am: 36acff7d7e am: 1f814d7630 am: ca45737e27 (diff) | |
| parent | Add a checker for signature boundary in verifier am: 54ea136fde (diff) | |
| download | android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.tar android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.tar.gz android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.tar.bz2 android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.tar.lz android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.tar.xz android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.tar.zst android_bootable_recovery-d3d5e54a45eccac59eb72d5becfa9e320403b4f5.zip | |
Diffstat (limited to '')
| -rw-r--r-- | verifier.cpp | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/verifier.cpp b/verifier.cpp index 61e5adf0b..bf7071d13 100644 --- a/verifier.cpp +++ b/verifier.cpp @@ -144,6 +144,12 @@ int verify_file(unsigned char* addr, size_t length, LOGI("comment is %zu bytes; signature %zu bytes from end\n", comment_size, signature_start); + if (signature_start > comment_size) { + LOGE("signature start: %zu is larger than comment size: %zu\n", signature_start, + comment_size); + return VERIFY_FAILURE; + } + if (signature_start <= FOOTER_SIZE) { LOGE("Signature start is in the footer"); return VERIFY_FAILURE; |