diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-19 01:13:33 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-19 01:13:33 +0000 |
commit | 086c044dc34dfc0f74fbe41f4ecb402b2cd34884 (patch) | |
tree | a4f824bd33cb075dd5aa3eb5a0a94af221bbe83a /toolkit/components/corroborator | |
parent | Adding debian version 124.0.1-1. (diff) | |
download | firefox-086c044dc34dfc0f74fbe41f4ecb402b2cd34884.tar.xz firefox-086c044dc34dfc0f74fbe41f4ecb402b2cd34884.zip |
Merging upstream version 125.0.1.
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'toolkit/components/corroborator')
-rw-r--r-- | toolkit/components/corroborator/Corroborate.sys.mjs | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/toolkit/components/corroborator/Corroborate.sys.mjs b/toolkit/components/corroborator/Corroborate.sys.mjs index 1f06ce8412..51b447726c 100644 --- a/toolkit/components/corroborator/Corroborate.sys.mjs +++ b/toolkit/components/corroborator/Corroborate.sys.mjs @@ -33,10 +33,18 @@ export const Corroborate = { lazy.gCertDB.openSignedAppFileAsync( root, file, - (rv, _zipReader, cert) => { + (rv, _zipReader, signatureInfos) => { + // aSignatureInfos is an array of nsIAppSignatureInfo. + // This implementation could be modified to iterate through the array to + // determine if one or all of the verified signatures used a satisfactory + // algorithm and signing certificate. + // For now, though, it maintains existing behavior by inspecting the + // first signing certificate encountered. resolve( Components.isSuccessCode(rv) && - cert.organizationalUnit === expectedOrganizationalUnit + signatureInfos.length && + signatureInfos[0].signerCert.organizationalUnit == + expectedOrganizationalUnit ); } ); |