|
 |
5f38272 |
From 7c7a97f60c1b3400b921981a3cd9e9aae4f28987 Mon Sep 17 00:00:00 2001
|
|
|
5f38272 |
From: Christina Fu <cfu@redhat.com>
|
|
|
5f38272 |
Date: Tue, 26 Jun 2018 17:59:28 -0700
|
|
|
5f38272 |
Subject: [PATCH] Ticket 12 AlgorithmIdentifier decode/encode process alters
|
|
|
5f38272 |
original data
|
|
|
5f38272 |
|
|
|
5f38272 |
This patch provides fix to ensure that the encoding and decoding of an AlgorithmIdentifier
|
|
|
5f38272 |
structure would not alter the data.
|
|
|
5f38272 |
|
|
|
5f38272 |
credit: original fix suggestion provided by david.k.stutzman2.ctr@mail.mil
|
|
|
5f38272 |
|
|
|
5f38272 |
fixes https://pagure.io/jss/issue/12
|
|
|
5f38272 |
---
|
|
|
5f38272 |
org/mozilla/jss/pkix/primitive/AlgorithmIdentifier.java | 13 +------------
|
|
|
5f38272 |
1 file changed, 1 insertion(+), 12 deletions(-)
|
|
|
5f38272 |
|
|
|
5f38272 |
diff --git a/org/mozilla/jss/pkix/primitive/AlgorithmIdentifier.java b/org/mozilla/jss/pkix/primitive/AlgorithmIdentifier.java
|
|
|
5f38272 |
index 0662f76..3487707 100644
|
|
|
5f38272 |
--- a/jss/org/mozilla/jss/pkix/primitive/AlgorithmIdentifier.java
|
|
|
5f38272 |
+++ b/jss/org/mozilla/jss/pkix/primitive/AlgorithmIdentifier.java
|
|
|
5f38272 |
@@ -103,19 +103,8 @@ public static class Template implements ASN1Template {
|
|
|
5f38272 |
Assert._assert( seq.size() == 2 );
|
|
|
5f38272 |
|
|
|
5f38272 |
OBJECT_IDENTIFIER algOID = (OBJECT_IDENTIFIER)seq.elementAt(0);
|
|
|
5f38272 |
- boolean allowParams = true;
|
|
|
5f38272 |
- try {
|
|
|
5f38272 |
- if (algOID.equals(SignatureAlgorithm.ECSignatureWithSHA256Digest.toOID()) ||
|
|
|
5f38272 |
- algOID.equals(SignatureAlgorithm.ECSignatureWithSHA384Digest.toOID()) ||
|
|
|
5f38272 |
- algOID.equals(SignatureAlgorithm.ECSignatureWithSHA512Digest.toOID())) {
|
|
|
5f38272 |
- allowParams = false;
|
|
|
5f38272 |
- }
|
|
|
5f38272 |
- } catch (NoSuchAlgorithmException e) {
|
|
|
5f38272 |
- // System.out.println("JSS: AlgorithmIdentifier:decode: " + e.toString());
|
|
|
5f38272 |
- // unlikely to happen; swallow it. treat it as allowParams;
|
|
|
5f38272 |
- }
|
|
|
5f38272 |
|
|
|
5f38272 |
- if (!allowParams) {
|
|
|
5f38272 |
+ if (seq.elementAt(1) == null) {
|
|
|
5f38272 |
return new AlgorithmIdentifier(
|
|
|
5f38272 |
algOID // OID
|
|
|
5f38272 |
);
|
|
|
5f38272 |
--
|
|
|
5f38272 |
1.8.3.1
|
|
|
5f38272 |
|