// a feature of "the" process (defined by the environment), and take no
// samples whatsoever.
//
-bool CodeSignatureAclSubject::validate(const AclValidationContext &context) const
+bool CodeSignatureAclSubject::validates(const AclValidationContext &context) const
{
// a suitable environment is required for a match
if (Environment *env = context.environment<Environment>())
if (list[n].is(CSSM_LIST_ELEMENT_DATUM)) {
const BlobCore *blob = list[n].data().interpretedAs<const BlobCore>();
if (blob->length() < sizeof(BlobCore)) {
- secdebug("csblob", "runt blob (0x%x/%zd) slot %d in CSSM_LIST",
+ secinfo("csblob", "runt blob (0x%x/%zd) slot %d in CSSM_LIST",
blob->magic(), blob->length(), n);
CssmError::throwMe(CSSM_ERRCODE_INVALID_ACL_SUBJECT_VALUE);
} else if (blob->length() != list[n].data().length()) {
- secdebug("csblob", "badly sized blob (0x%x/%zd) slot %d in CSSM_LIST",
+ secinfo("csblob", "badly sized blob (0x%x/%zd) slot %d in CSSM_LIST",
blob->magic(), blob->length(), n);
CssmError::throwMe(CSSM_ERRCODE_INVALID_ACL_SUBJECT_VALUE);
}
blob = increment<const BlobCore>(blob, alignUp(blob->length(), commentBagAlignment))) {
size_t leftInBag = difference(commentBag.end(), blob);
if (leftInBag < sizeof(BlobCore) || blob->length() < sizeof(BlobCore) || blob->length() > leftInBag) {
- secdebug("csblob", "invalid blob (0x%x/%zd) [%zd in bag] in code signing ACL for %s - stopping scan",
+ secinfo("csblob", "invalid blob (0x%x/%zd) [%zd in bag] in code signing ACL for %s - stopping scan",
blob->magic(), blob->length(), leftInBag, subj->path().c_str());
break; // can't trust anything beyond this blob
}