diff options
| author | Werner Koch <wk@gnupg.org> | 2020-02-10 15:32:55 +0100 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2020-02-10 15:32:55 +0100 |
| commit | 5681b8eaa44005afdd30211b47e5fb1a799583dd (patch) | |
| tree | c8d85a0043d36b8a0b593a7448496cf860211421 /g13 | |
| parent | card: Remove command "key-attr" and hack on "generate". (diff) | |
| download | gnupg2-5681b8eaa44005afdd30211b47e5fb1a799583dd.tar.xz gnupg2-5681b8eaa44005afdd30211b47e5fb1a799583dd.zip | |
gpg: Make really sure that --verify-files always returns an error.
* g10/verify.c (verify_files): Track the first error code.
--
It seems to be possible to play tricks with packet structures so that
log_error is not used for a bad input data. By actually checking the
return code and let the main driver in gpg call log_error, we can fix
this case.
Note that using gpg --verify-files and relying solely on gpg's return
code is at best a questionable strategy. It is for example impossible
to tell which data has been signed.
Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'g13')
0 files changed, 0 insertions, 0 deletions