mirror of
https://github.com/bitcoin/bitcoin.git
synced 2025-07-28 12:33:16 +02:00
Fix CVE-2018-12356 by hardening the regex.
This commit is contained in:
@@ -57,7 +57,7 @@ if ! $VALID; then
|
|||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
if $VALID && $REVSIG; then
|
if $VALID && $REVSIG; then
|
||||||
printf '%s\n' "$INPUT" | gpg --trust-model always "$@" 2>/dev/null | grep "\[GNUPG:\] \(NEWSIG\|SIG_ID\|VALIDSIG\)"
|
printf '%s\n' "$INPUT" | gpg --trust-model always "$@" 2>/dev/null | grep "^\[GNUPG:\] \(NEWSIG\|SIG_ID\|VALIDSIG\)"
|
||||||
echo "$GOODREVSIG"
|
echo "$GOODREVSIG"
|
||||||
else
|
else
|
||||||
printf '%s\n' "$INPUT" | gpg --trust-model always "$@" 2>/dev/null
|
printf '%s\n' "$INPUT" | gpg --trust-model always "$@" 2>/dev/null
|
||||||
|
Reference in New Issue
Block a user