Files
pkgsrc-ng/security/crudesaml/patches/patch-saml.c
2016-01-21 23:40:00 +01:00

21 lines
655 B
C

$NetBSD: patch-saml.c,v 1.1 2014/07/22 09:47:37 manu Exp $
When iterating to the root of the assertiin, make sure we do not try to
work on XML_DOCUMENT_NODE type node, only on XML_ELEMENT_NODE.
--- saml.c.orig 2012-11-08 09:36:54.000000000 +0100
+++ saml.c 2014-02-10 05:52:14.000000000 +0100
@@ -385,9 +385,11 @@
if (node->parent == NULL)
break;
node = node->parent;
- } while ((node != node->parent) && (node != NULL));
+ } while ((node != node->parent) &&
+ (node != NULL) &&
+ (node->type == XML_ELEMENT_NODE));
saml_error(params, 0, "SAML assertion signature verification "
"failure (error %d)", error);
return EACCES;