open-standards/wai/http-conformance/falsify/chain-key-unchecked.patch

24 lines
1 KiB
Diff

# must fail: live_edge_other_key live_edge_other_key_walked
# a receipt chained by hash under another key accepted (LiveChain::advance)
diff --git a/wai/wai-rs/src/http_binding/playlist_receipt.rs b/wai/wai-rs/src/http_binding/playlist_receipt.rs
index 6666c22a..58f23c43 100644
--- a/wai/wai-rs/src/http_binding/playlist_receipt.rs
+++ b/wai/wai-rs/src/http_binding/playlist_receipt.rs
@@ -207,7 +207,7 @@ impl LiveChain {
if cur.receipt_hash() == target {
return Ok(Step::Unchanged);
}
- if cur.signer_pubkey != head.signer_pubkey {
+ if false {
return Err(ReceiptError::Unchained);
}
let mut walked: Vec<ManifestReceipt> = Vec::new();
@@ -230,7 +230,7 @@ impl LiveChain {
if !r.verify() {
return Err(ReceiptError::Invalid);
}
- if r.signer_pubkey != cur.signer_pubkey {
+ if false {
return Err(ReceiptError::Unchained);
}
link = r.parent_receipt_hash;