Security-55471.14.18.tar.gz

[apple/security.git] / libsecurity_codesigning / lib / SecRequirement.cpp

diff --git a/libsecurity_codesigning/lib/SecRequirement.cpp b/libsecurity_codesigning/lib/SecRequirement.cpp
index 68d95e45e8ab96b4be7777326cb08209d8e3f5ae..7414cec927e8a8239230b91c59548b5df5774ced 100644 (file)
--- a/libsecurity_codesigning/lib/SecRequirement.cpp
+++ b/libsecurity_codesigning/lib/SecRequirement.cpp
@@ -228,6 +228,8 @@ OSStatus SecRequirementsCopyRequirements(CFDataRef requirementSet, SecCSFlags fl
        if (requirementSet == NULL)
                return errSecCSObjectRequired;
        const Requirements *reqs = (const Requirements *)CFDataGetBytePtr(requirementSet);
+       if (!reqs->validateBlob())
+               MacOSError::throwMe(errSecCSReqInvalid);
        CFRef<CFMutableDictionaryRef> dict = makeCFMutableDictionary();
        unsigned count = reqs->count();
        for (unsigned n = 0; n < count; n++) {