Skip to content

Commit 08fafeb

Browse files
committed
CryptoPkg: Update RsaPkcs7Tests for TCBZ3925
Update TestVerifyPkcs7SignVerifyNonSelfIssued to pass the raw DER certificate data (TestCert2) directly to Pkcs7Sign instead of constructing an X509 certificate object first. Remove the associated SignCert variable, X509ConstructCertificate call, and X509Free cleanup. Signed-off-by: Doug Flick <dougflick@microsoft.com>
1 parent 8effab7 commit 08fafeb

1 file changed

Lines changed: 15 additions & 12 deletions

File tree

CryptoPkg/Test/UnitTest/Library/BaseCryptLib/RsaPkcs7Tests.c

Lines changed: 15 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -606,17 +606,20 @@ TestVerifyPkcs7SignVerifyNonSelfIssued (
606606
BOOLEAN Status;
607607
UINT8 *P7SignedData;
608608
UINTN P7SignedDataSize;
609-
UINT8 *SignCert;
609+
610+
// UINT8 *SignCert; // MU_CHANGE [TCBZ3925] - Pkcs7Sign is broken
610611

611612
P7SignedData = NULL;
612-
SignCert = NULL;
613+
// SignCert = NULL; // MU_CHANGE [TCBZ3925] - Pkcs7Sign is broken
613614

615+
// MU_CHANGE [TCBZ3925] [BEGIN] - Pkcs7Sign is broken
614616
//
615617
// Construct Signer Certificate from RAW data.
616618
//
617-
Status = X509ConstructCertificate (TestCert2, sizeof (TestCert2), (UINT8 **)&SignCert);
618-
UT_ASSERT_TRUE (Status);
619-
UT_ASSERT_NOT_NULL (SignCert);
619+
// Status = X509ConstructCertificate (TestCert2, sizeof (TestCert2), (UINT8 **)&SignCert);
620+
// UT_ASSERT_TRUE (Status);
621+
// UT_ASSERT_NOT_NULL (SignCert);
622+
// MU_CHANGE [TCBZ3925] [END] - Pkcs7Sign is broken
620623

621624
//
622625
// Create PKCS#7 signedData on Payload.
@@ -628,10 +631,8 @@ TestVerifyPkcs7SignVerifyNonSelfIssued (
628631
(CONST UINT8 *)TestKeyCert2PemPass,
629632
(UINT8 *)Payload,
630633
AsciiStrLen (Payload),
631-
SignCert,
632-
// MU_CHANGE # [TCBZ3925] - Pkcs7Sign is broken
633-
sizeof (TestCert2),
634-
// MU_CHANGE # [TCBZ3925] - Pkcs7Sign is broken
634+
TestCert2, // MU_CHANGE [TCBZ3925] - Pkcs7Sign is broken
635+
sizeof (TestCert2), // MU_CHANGE [TCBZ3925] - Pkcs7Sign is broken
635636
NULL,
636637
&P7SignedData,
637638
&P7SignedDataSize
@@ -653,9 +654,11 @@ TestVerifyPkcs7SignVerifyNonSelfIssued (
653654
FreePool (P7SignedData);
654655
}
655656

656-
if (SignCert != NULL) {
657-
X509Free (SignCert);
658-
}
657+
// MU_CHANGE [TCBZ3925] [BEGIN] - Pkcs7Sign is broken
658+
// if (SignCert != NULL) {
659+
// X509Free (SignCert);
660+
// }
661+
// MU_CHANGE [TCBZ3925] [END] - Pkcs7Sign is broken
659662

660663
return UNIT_TEST_PASSED;
661664
}

0 commit comments

Comments
 (0)