mirror of
https://github.com/tendermint/tendermint.git
synced 2026-01-10 06:57:24 +00:00
Fix for panic in signature verification if a peer sends a nil public key.
This commit is contained in:
committed by
Jack Zampolin
parent
797a3f6c16
commit
ebfaf30705
@@ -133,6 +133,11 @@ func MakeSecretConnection(conn io.ReadWriteCloser, locPrivKey crypto.PrivKey) (*
|
||||
}
|
||||
|
||||
remPubKey, remSignature := authSigMsg.Key, authSigMsg.Sig
|
||||
|
||||
if remPubKey == nil {
|
||||
return nil, errors.New("Peer sent a nil public key")
|
||||
}
|
||||
|
||||
if !remPubKey.VerifyBytes(challenge[:], remSignature) {
|
||||
return nil, errors.New("Challenge verification failed")
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user