tree 3a599855cc8d210832010358ea530be975dd583b
parent fdc425e3eb90e220c55455f746975ff87ee8dc90
author Lily Chen <chlily@google.com> 1791476202 +0000
committer boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1792698197 -0700

crypto/x509 MTC: Strictly parse extensions in MTC verification

Add the missing check that the MTCProof's extensions field is a
well-formed list of MTCLogEntryExtension structures in strictly
ascending order by type, as required by section 5.2.1. Previously the
field was hashed wholesale as opaque bytes without being parsed. No
extension types are defined, so well-formed extensions are otherwise
still ignored.

Bug: 571178555
Change-Id: Ib25e7318ad9c27a4af5c972f34f93f3f6a6a6964
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/104509
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: Lily Chen <chlily@google.com>