Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Verify signature before verifying sbat levels #583

Merged
merged 1 commit into from
Jun 27, 2023
Merged

Verify signature before verifying sbat levels #583

merged 1 commit into from
Jun 27, 2023

Commits on Jun 27, 2023

  1. Verify signature before verifying sbat levels 

    Verifying the validity of a files signature can protect from
an attacker creating a file that exploits a potential issue
in the sbat validation. If the signature is not checked first,
an attacker can just create a file with a valid .sbat section
and can still attack the signature validation.

Signed-off-by: Jan Setje-Eilers <Jan.SetjeEilers@oracle.com>
    @jsetje @vathpela
    jsetje authored and vathpela committed Jun 27, 2023
    Configuration menu
    Copy the full SHA
    8b68133 View commit details
    Browse the repository at this point in the history