Re: Double-free on message signature verify in silc-client - Patch included

Stefan Vetsch <[email protected]> Sat, 29 May 2010 08:22:23 +0200
Newsgroups gmane.network.silc.devel
Message-ID <[email protected]>
Hey Pekka

Am 25.05.2010 06:27, schrieb Pekka Riikonen:
> Thanks for reporting.  I fixed it the same way except I return UNKNOWN 
> instead of FAILED.  We don't want to do the verification in that case at 
> all and the signature status is UNKNOWN.

Thanks for the feedback and for picking up my fix (and while I'm at it:
thanks for SILC). And for the UNKNOWN vs. FAILED thing: I think this was
a case of overthinking on my side :-). To return UNKNOWN makes sense
since the (cryptographic) verification isn't given a "chance" to fail
properly, when there is no Public-Key available.

Best Regards
Stefan
_______________________________________________________________________
Info:    https://lists.silcnet.org/mailman/listinfo/silc-announce
Archive: https://lists.silcnet.org/pipermail/silc-announce
FAQ:     http://silcnet.org/support/faq/