X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/5c19dc3ae3bd8e40a9c028b0deddd50ff337692c..ce3c8656732c924baf7e88df75eab50891bdc471:/OSX/libsecurity_codesigning/lib/Code.cpp

diff --git a/OSX/libsecurity_codesigning/lib/Code.cpp b/OSX/libsecurity_codesigning/lib/Code.cpp
index 643c4f58..3194bf3d 100644
--- a/OSX/libsecurity_codesigning/lib/Code.cpp
+++ b/OSX/libsecurity_codesigning/lib/Code.cpp
@@ -205,7 +205,9 @@ void SecCode::checkValidity(SecCSFlags flags)
 	SecStaticCode *hostDisk = this->host()->staticCode();
 
 	// check my static state
-	myDisk->validateDirectory();
+	myDisk->validateNonResourceComponents();	// also validates the CodeDirectory
+	if (flags & kSecCSStrictValidate)
+		myDisk->diskRep()->strictValidate(myDisk->codeDirectory(), DiskRep::ToleratedErrors(), flags);
 
 	// check my own dynamic state
 	if (!(this->host()->getGuestStatus(this) & kSecCodeStatusValid))