mirror of git://git.gnupg.org/gnupg.git
gpg: Also detect a plaintext packet before an encrypted packet.
* g10/mainproc.c (proc_encrypted): Print warning and later force an
error.
--
Note that when this error is triggered the plaintext from the literal
data packet has already been outputted before the BEGIN_DECRYPTION
status line. We fail only later to get more information. Callers
need to check and act upon the decryption error code anyway.
Thanks to Marcus for pointing out this case.
GnuPG-bug-id: 4000
Signed-off-by: Werner Koch <wk@gnupg.org>
(cherry picked from commit 344b548dc7
)
This commit is contained in:
parent
dc87a3341f
commit
054a187f24
|
@ -532,6 +532,14 @@ static void
|
|||
proc_encrypted (CTX c, PACKET *pkt)
|
||||
{
|
||||
int result = 0;
|
||||
int early_plaintext = literals_seen;
|
||||
|
||||
if (early_plaintext)
|
||||
{
|
||||
log_info (_("WARNING: multiple plaintexts seen\n"));
|
||||
write_status_errcode ("decryption.early_plaintext", GPG_ERR_BAD_DATA);
|
||||
/* We fail only later so that we can print some more info first. */
|
||||
}
|
||||
|
||||
if (!opt.quiet)
|
||||
{
|
||||
|
@ -651,6 +659,10 @@ proc_encrypted (CTX c, PACKET *pkt)
|
|||
if (!result)
|
||||
result = decrypt_data (c->ctrl, c, pkt->pkt.encrypted, c->dek );
|
||||
|
||||
/* Trigger the deferred error. */
|
||||
if (!result && early_plaintext)
|
||||
result = gpg_error (GPG_ERR_BAD_DATA);
|
||||
|
||||
if (result == -1)
|
||||
;
|
||||
else if (!result
|
||||
|
|
Loading…
Reference in New Issue