noisymime
/
Arduino
mirror of https://github.com/noisymime/Arduino.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

GPGSignatureVerification: better error handling when reading signature

This commit is contained in:
Federico Fissore 2015-05-05 08:49:01 +02:00
parent 0c123d7d14
commit 060ec30e1c
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
arduino-core/src/cc/arduino/contributions/GPGDetachedSignatureVerifier.java
View File

@ -58,7 +58,16 @@ public class GPGDetachedSignatureVerifier {
signatureInputStream = new FileInputStream(signature); signatureInputStream = new FileInputStream(signature);
PGPObjectFactory pgpObjectFactory = new PGPObjectFactory(signatureInputStream, new BcKeyFingerprintCalculator()); PGPObjectFactory pgpObjectFactory = new PGPObjectFactory(signatureInputStream, new BcKeyFingerprintCalculator());
PGPSignatureList pgpSignatureList = (PGPSignatureList) pgpObjectFactory.nextObject(); Object nextObject;
try {
nextObject = pgpObjectFactory.nextObject();
if (!(nextObject instanceof PGPSignatureList)) {
return false;
}
} catch (IOException e) {
return false;
}
PGPSignatureList pgpSignatureList = (PGPSignatureList) nextObject;
assert pgpSignatureList.size() == 1; assert pgpSignatureList.size() == 1;
PGPSignature pgpSignature = pgpSignatureList.get(0); PGPSignature pgpSignature = pgpSignatureList.get(0);