| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
give a fake trust root allowing anything. adbdump code will verify
and dump each signature individually.
|
|
If a signature is longer than max allowed adb signature length
then adb_walk_block writes out of boundary of stack variable tmp.
The len += snprintf is not safe per standard snprintf implementation
(kernel does it differently). Introduce and use apk_blob_push_fmt
which does the checking better.
Fixes #10752
Reported-by: Samanta Navarro <ferivoz@riseup.net>
|
|
|
|
In struct adb, do not keep the whole header, just the schema
in host byte order.
|
|
Removes code duplication, and puts important checks in one place.
Support seamless decompression in adbdump.
|
|
EVP_MD_CTX_set_pkey_ctx() is fairly new openssl function, and not
existing in many alternative. Use EVP_MD_CTX_reset() which is slightly
more heavy but more portable. Add also signature buffer lengths to
work with RSA.
|
|
- remove unneeded assert.h
- add needed limits.h
|
|
|
|
|
|
This converts 'adbdump' applet to generate adb_walk api callbacks,
and implement gentext backend to generate the yaml-like text output.
|
