commit | af316fc442ef23901bbfcec5af55e69ca6ce9563 | [log] [tgz] |
---|---|---|
author | David Howells <dhowells@redhat.com> | Tue Jul 01 16:02:52 2014 +0100 |
committer | David Howells <dhowells@redhat.com> | Wed Jul 09 14:58:37 2014 +0100 |
tree | d638d69cfe97e2c8b74aa99fd82d25661baa5e16 | |
parent | dd7d66f21b9eb6a3979d8c9ba910eba772cfbbc9 [diff] |
pefile: Digest the PE binary and compare to the PKCS#7 data Digest the signed parts of the PE binary, canonicalising the section table before we need it, and then compare the the resulting digest to the one in the PKCS#7 signed content. Signed-off-by: David Howells <dhowells@redhat.com> Acked-by: Vivek Goyal <vgoyal@redhat.com> Reviewed-by: Kees Cook <keescook@chromium.org>