X-Git-Url: https://git.saurik.com/apple/libsecurity_codesigning.git/blobdiff_plain/f60086fcc38b96c965d923d8ba057d01d516f6d1..HEAD:/lib/SecStaticCode.cpp

diff --git a/lib/SecStaticCode.cpp b/lib/SecStaticCode.cpp
index 3669928..7cb5a17 100644
--- a/lib/SecStaticCode.cpp
+++ b/lib/SecStaticCode.cpp
@@ -98,7 +98,7 @@ static void validateNested(string location, const SecRequirement *req, SecCSFlag
 static void validate(SecStaticCode *code, const SecRequirement *req, SecCSFlags flags)
 {
 	try {
-		code->validateDirectory();
+		code->validateNonResourceComponents();	// also validates the CodeDirectory
 		if (!(flags & kSecCSDoNotValidateExecutable))
 			code->validateExecutable();
 		if (!(flags & kSecCSDoNotValidateResources))
@@ -187,6 +187,7 @@ OSStatus SecStaticCodeCheckValidityWithErrors(SecStaticCodeRef staticCodeRef, Se
 		| kSecCSDoNotValidateExecutable
 		| kSecCSDoNotValidateResources
 		| kSecCSConsiderExpiration
+		| kSecCSEnforceRevocationChecks
 		| kSecCSCheckNestedCode);
 
 	SecPointer<SecStaticCode> code = SecStaticCode::requiredStatic(staticCodeRef);