tree 36b84cb272762812acc60a2fb72ce831661bf972
parent 43277274ab238bc43eeae7b14a4811745a4bc1b5
author Demi Marie Obenour <demiobenour@gmail.com> 1674936937 -0500
committer Demi Marie Obenour <demiobenour@gmail.com> 1677775723 -0500

refactor(auth): use a single function for parsing extensions

Previously, extensions were parsed twice: once with error checking for
validation, and a second time without error checking to extract the
extension data.  This is error prone and caused TFV-10 (CVE-2022-47630).

A simpler approach is to have get_ext() be responsible for all extension
parsing, and to treat a NULL OID as an indicator that get_ext() is only
being called for validation.  cert_parse() checks that get_ext() returns
IMG_PARSER_OK and fails otherwise.

Change-Id: I65a2ff053a188351ba54799827a2b7bd833bb037
Signed-off-by: Demi Marie Obenour <demiobenour@gmail.com>