mirror of
https://github.com/esp8266/Arduino.git
synced 2025-06-16 11:21:18 +03:00
GPGSignatureVerification: better error handling when reading signature
This commit is contained in:
@ -58,7 +58,16 @@ public class GPGDetachedSignatureVerifier {
|
|||||||
signatureInputStream = new FileInputStream(signature);
|
signatureInputStream = new FileInputStream(signature);
|
||||||
PGPObjectFactory pgpObjectFactory = new PGPObjectFactory(signatureInputStream, new BcKeyFingerprintCalculator());
|
PGPObjectFactory pgpObjectFactory = new PGPObjectFactory(signatureInputStream, new BcKeyFingerprintCalculator());
|
||||||
|
|
||||||
PGPSignatureList pgpSignatureList = (PGPSignatureList) pgpObjectFactory.nextObject();
|
Object nextObject;
|
||||||
|
try {
|
||||||
|
nextObject = pgpObjectFactory.nextObject();
|
||||||
|
if (!(nextObject instanceof PGPSignatureList)) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
} catch (IOException e) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
PGPSignatureList pgpSignatureList = (PGPSignatureList) nextObject;
|
||||||
assert pgpSignatureList.size() == 1;
|
assert pgpSignatureList.size() == 1;
|
||||||
PGPSignature pgpSignature = pgpSignatureList.get(0);
|
PGPSignature pgpSignature = pgpSignatureList.get(0);
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user