4 ms·
I think the parent is pointing out that if the signature has to be both syntactically and cryptographically valid, then this would defeat the fuzzer for obvious
by cjbprime 2y ago
I think the parent is pointing out that if the signature has to be both syntactically and cryptographically valid, then this would defeat the fuzzer for obvious reasons.
But I don't think it does, for this vulnerability. The signature is checked last.
- capitainenemo 2y agoYep. That was what I was thinking. Didn't realise the signature was checked later. Thanks for the clarification.