From 531de4d8583c0279a16c00c5b11c87ab295fda7a Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 1 Jun 2026 18:19:03 +0200 Subject: [PATCH] pkcs7: Fail parsing PKCS#7 signed-data if content can't be parsed This avoids a crash after verifying the signed attributes in the signature enumerator. --- src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c b/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c index 995157e41..f49d52010 100644 --- a/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c +++ b/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c @@ -486,7 +486,7 @@ static bool parse(private_pkcs7_signed_data_t *this, chunk_t content) break; } } - success = parser->success(parser); + success = parser->success(parser) && this->content; parser->destroy(parser); return success;