mirror of
https://github.com/stablyai/orca.git
synced 2026-10-31 00:57:45 +00:00
Neil
5f50b95c9c
* fix: remediate dependency security advisories across workspaces * test: verify security patches without ad hoc dependency installs
15 lines
549 B
Diff
15 lines
549 B
Diff
diff --git a/lib/rsa.js b/lib/rsa.js
|
|
--- a/lib/rsa.js
|
|
+++ b/lib/rsa.js
|
|
@@ -1172,7 +1172,9 @@
|
|
var capture = {};
|
|
var errors = [];
|
|
if(!asn1.validate(obj, digestInfoValidator, capture, errors) ||
|
|
- obj.value.length !== 2) {
|
|
+ obj.value.length !== 2 ||
|
|
+ obj.value[0].value.length !==
|
|
+ (('parameters' in capture) ? 2 : 1)) {
|
|
var error = new Error(
|
|
'ASN.1 object does not contain a valid RSASSA-PKCS1-v1_5 ' +
|
|
'DigestInfo value.');
|