pefile: Strip the wrapper off of the cert data block
authorDavid Howells <dhowells@redhat.com>
Tue, 1 Jul 2014 15:02:51 +0000 (16:02 +0100)
committerDavid Howells <dhowells@redhat.com>
Wed, 9 Jul 2014 13:58:37 +0000 (14:58 +0100)
commit09dacbbda935895a4898e517e1248c11ca493216
tree0860458e753285731c8f9752a95b2cbe53684c67
parent26d1164be37f1145a96af15f294122876d8e5c77
pefile: Strip the wrapper off of the cert data block

The certificate data block in a PE binary has a wrapper around the PKCS#7
signature we actually want to get at.  Strip this off and check that we've got
something that appears to be a PKCS#7 signature.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Vivek Goyal <vgoyal@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
crypto/asymmetric_keys/verify_pefile.c