OSDN Git Service

Use correct cert chain from PKCS#7 SignedData block.
authorAlex Klyubin <klyubin@google.com>
Tue, 31 May 2016 23:04:49 +0000 (16:04 -0700)
committerAlex Klyubin <klyubin@google.com>
Tue, 31 May 2016 23:10:00 +0000 (16:10 -0700)
commit29045203f3f694cddea7b3f115ea82f648ba0cba
treeb2352445196047a6ff423af54504d4a03536c67a
parent1c39a112b43e50da4e801d634e28ae7a130c0dcb
Use correct cert chain from PKCS#7 SignedData block.

This fixes a bug where APK JAR signature verifier returned the wrong
certificate chain. Rather than returning the cert chain of the
verified SignerInfo, it was returning the bag of certs of the PKCS#7
SignedData block.

This issue was introduced in Android N and thus does not affect
earlier Android platform versions.

Bug: 29055836
Change-Id: I684c0f8e9ff47b922030645e07b6a114c0eb0963
core/java/android/util/jar/StrictJarVerifier.java