From 1c5f1e8b4eb06369c07b25729eb2ae6e037b86ed Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai Date: Tue, 12 Oct 2010 18:34:51 -0400 Subject: [PATCH 050/150] - check for and warn about empty encapsulated content --- src/plugins/preauth/pkinit/pkinit_crypto_nss.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/src/plugins/preauth/pkinit/pkinit_crypto_nss.c b/src/plugins/preauth/pkinit/pkinit_crypto_nss.c index cbd83e6..d156f5d 100644 --- a/src/plugins/preauth/pkinit/pkinit_crypto_nss.c +++ b/src/plugins/preauth/pkinit/pkinit_crypto_nss.c @@ -3307,6 +3307,10 @@ crypto_signeddata_common_verify(krb5_context context, return ENOMEM; /* FIXME: better error? */ } *plain = NSS_CMSContentInfo_GetContent(ecinfo); + if ((*plain != NULL) && ((*plain)->len == 0)) { + pkiDebug("%s: warning: encapsulated content appears empty\n", + __FUNCTION__); + } /* Save the peer cert -- we'll need it later. */ pkiDebug("%s: saving peer certificate\n", __FUNCTION__); if (req_cryptoctx->peer_cert != NULL) { -- 1.7.6.4