]> git.ipfire.org Git - thirdparty/systemd.git/commit
fido2: make misadvertised clientPin feature fatal
authorLennart Poettering <lennart@poettering.net>
Thu, 27 May 2021 20:59:18 +0000 (22:59 +0200)
committerLennart Poettering <lennart@poettering.net>
Fri, 28 May 2021 14:36:51 +0000 (16:36 +0200)
commitec543d18d459ad39cd34923eaeafb233e031b196
treee21b935d83313875d71516677af90a2f5917e939
parent0735ed950a8a8c476dc7760eb294e3048a253369
fido2: make misadvertised clientPin feature fatal

We need really need to trust the feature set, since we are about to set
it in stone storing the result in JSON, hence react a bit more allergic
about token that misadvertise the feature.

Note that I added this to be defensive, I am not aware any token that
actually misadvertises this. hence it should be safe to make this fatal,
and should this not work we can always revisit things.
src/shared/libfido2-util.c