[Rpm-maint] [rpm-software-management/rpm] Validate and require subkey binding signatures on PGP public keys (#1795)

[Panu Matilainen]

@pmatilai commented on this pull request.



> +	if (sigalg->setmpi(sigalg, i, p))
+	    break;

It's not about just accessors.

The point is, these worries are *so far* out there when there are a thousand more practical ways to exploit that an inordinate time has already been spent on this.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1795#discussion_r730708801
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211018/36c5c07a/attachment.html>