Security-57337.60.2.tar.gz

[apple/security.git] / OSX / libsecurity_codesigning / lib / Code.cpp

diff --git a/OSX/libsecurity_codesigning/lib/Code.cpp b/OSX/libsecurity_codesigning/lib/Code.cpp
index 643c4f58d9e424113aa5e5541ef0d5f4e63d4370..3194bf3dfe638aac0b8666d7bfe6f83b01cf94b1 100644 (file)
--- a/OSX/libsecurity_codesigning/lib/Code.cpp
+++ b/OSX/libsecurity_codesigning/lib/Code.cpp
@@ -205,7 +205,9 @@ void SecCode::checkValidity(SecCSFlags flags)
        SecStaticCode *hostDisk = this->host()->staticCode();
 
        // check my static state
-       myDisk->validateDirectory();
+       myDisk->validateNonResourceComponents();        // also validates the CodeDirectory
+       if (flags & kSecCSStrictValidate)
+               myDisk->diskRep()->strictValidate(myDisk->codeDirectory(), DiskRep::ToleratedErrors(), flags);
 
        // check my own dynamic state
        if (!(this->host()->getGuestStatus(this) & kSecCodeStatusValid))