diff options
| author | Michael Brown | 2024-08-14 15:00:48 +0200 |
|---|---|---|
| committer | Michael Brown | 2024-08-14 15:07:41 +0200 |
| commit | 9d9465b140cf59750f97995c501d054d2543c29a (patch) | |
| tree | e3e42bc86a9c46603b6491a5800d3e21ca31f74b /src/interface/efi/efi_pci.c | |
| parent | [crypto] Generalise cms_signature to cms_message (diff) | |
| download | ipxe-9d9465b140cf59750f97995c501d054d2543c29a.tar.gz ipxe-9d9465b140cf59750f97995c501d054d2543c29a.tar.xz ipxe-9d9465b140cf59750f97995c501d054d2543c29a.zip | |
[crypto] Fix debug name for empty certificate chain validators
An attempt to use a validator for an empty certificate chain will
correctly fail the overall validation with the "empty certificate
chain" error propagated from x509_auto_append().
In a debug build, the call to validator_name() will attempt to call
x509_name() on a non-existent certificate, resulting in garbage in the
debug message.
Fix by checking for the special case of an empty certificate chain.
This issue does not affect non-debug builds, since validator_name() is
(as per its description) called only for debug messages.
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/interface/efi/efi_pci.c')
0 files changed, 0 insertions, 0 deletions