Changeset 86551 in vbox for trunk/src/VBox

Timestamp:

Oct 13, 2020 12:09:10 AM (4 years ago)

Author:

vboxsync

Message:

SUPHardNt,IPRT: If there are nested signatures (i.e. more than one signature), don't get grumpy if there are time or cert path issues with some of them, as long as one or more checks out perfectly. (Mind, all the signature data must check out, it's just the cert path or signing time we're relaxing here.) [build fix] ticketref:19743 bugref:3103

File:

• trunk/src/VBox/Runtime/common/ldr/ldrPE.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/common/ldr/ldrPE.cpp

@@ -3006 +3006 @@
              * Verify other signatures with the same digest type.
              */
-            RTLDRPEHASHRESUNION const * const pHashRes = &pInfo->HashRes;
+            RTLDRPEHASHRESUNION const * const pHashRes      = &pInfo->HashRes;
+            RTDIGESTTYPE const                enmDigestType = pInfo->enmDigest;
             for (uint32_t i = 0; i < pSignature->cNested; i++)
             {
                 pInfo = &pSignature->paNested[i]; /* Note! pInfo changes! */
                 if (   !pInfo->fValidatedImageHash
-                    && pInfo->enmDigest == pInfo->enmDigest
+                    && pInfo->enmDigest == enmDigestType
                     /* paranoia from the top of this function: */
                     && pInfo->pIndData