[gobolinux-devel] Bugs in signing

Jonas Karlsson jonka750 at student.liu.se
Sat Aug 5 15:02:41 GMT 2006


I've found mor bugs in signing, but I can't seem to find a good solution.
To reproduce, try to sign a program that isn't Current and that has files  
that differs from Current (the latter shouldn't be that hard) alternative  
try to sign a program that isn't symlinked.
As no version is passed to ListProgramFiles, it tries to read version from  
Current link, but as it points to an alternate version (or doesn't exist)  
it lists the wrong files (or quits with an error). I couldn't find a  
version variable in the code around where ListProgramFiles were called, so  
I have no good idea how to solve this one.
I guess the same bug is present in verifying signed programs as well, but  
I haven't verified that.

-- 
/Jonas

Using Opera's revolutionary e-mail client: http://www.opera.com/mail/


More information about the gobolinux-devel mailing list