diff options
| author | cdn@chromium.org <cdn@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-09-15 00:15:46 +0000 |
|---|---|---|
| committer | cdn@chromium.org <cdn@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-09-15 00:15:46 +0000 |
| commit | 183d7e61b7b50a62a4338dbaccae86e8d125f348 (patch) | |
| tree | 10dd396acd59252ee72d654ffc7ada9d05d8adff /chrome/browser/extensions | |
| parent | a9c6cf60c479980be65a3532f2a2a32a959a27fe (diff) | |
| download | chromium_src-183d7e61b7b50a62a4338dbaccae86e8d125f348.zip chromium_src-183d7e61b7b50a62a4338dbaccae86e8d125f348.tar.gz chromium_src-183d7e61b7b50a62a4338dbaccae86e8d125f348.tar.bz2 | |
Added check when unpacking extensions for a null key.
BUG=55615
TEST=None
Review URL: http://codereview.chromium.org/3395002
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@59462 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome/browser/extensions')
| -rw-r--r-- | chrome/browser/extensions/sandboxed_extension_unpacker.cc | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/chrome/browser/extensions/sandboxed_extension_unpacker.cc b/chrome/browser/extensions/sandboxed_extension_unpacker.cc index 86b4eea..1c5e319 100644 --- a/chrome/browser/extensions/sandboxed_extension_unpacker.cc +++ b/chrome/browser/extensions/sandboxed_extension_unpacker.cc @@ -213,6 +213,10 @@ bool SandboxedExtensionUnpacker::ValidateSignature() { ReportFailure("Excessively large key or signature"); return false; } + if (header.key_size == 0) { + ReportFailure("Key length is zero"); + return false; + } std::vector<uint8> key; key.resize(header.key_size); |