)]}'
{
  "commit": "c3ffc3300a9450cf8e396c7880be7c6cadc16a4a",
  "tree": "1a2b5bb1e7f7895c14bcf63f5265c45e4d788ff7",
  "parents": [
    "92fc1364eec540e5cb11c80a6c4eb6bd74423d59"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Fri Apr 24 15:14:26 2026 -0400"
  },
  "committer": {
    "name": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Fri Apr 24 16:31:29 2026 -0700"
  },
  "message": "pki: Check for unused bits when verifying MTC proofs\n\nX.509 made its signatureValue a BIT STRING, so every algorithm is stuck\nhaving to check this. (The spec says to do this in a somewhat roundabout\nway right now. It says to decode signatureValue as an MTCProof and then\nthe encoding is written so that only a whole number of bytes is valid.)\n\nChange-Id: I289c71f63d6e9d2b1acd25a70f2dd3792b85cfe5\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/93887\nReviewed-by: Matt Mueller \u003cmattm@google.com\u003e\nPresubmit-BoringSSL-Verified: boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com \u003cboringssl-scoped@luci-project-accounts.iam.gserviceaccount.com\u003e\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nAuto-Submit: David Benjamin \u003cdavidben@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1093ef74d5a8277a31c04128018c7231ab931e3e",
      "old_mode": 33188,
      "old_path": "gen/sources.bzl",
      "new_id": "34d79e2945296be01ecd9a12fce86fcac34fefc8",
      "new_mode": 33188,
      "new_path": "gen/sources.bzl"
    },
    {
      "type": "modify",
      "old_id": "44e90814b50946f766a6d5871bd3ff5bed0b0ef3",
      "old_mode": 33188,
      "old_path": "gen/sources.cmake",
      "new_id": "bc2cc2793e5c843a0e627b66531df7622e1ed511",
      "new_mode": 33188,
      "new_path": "gen/sources.cmake"
    },
    {
      "type": "modify",
      "old_id": "0c242ff3dc931963463b68306744867f546bb92f",
      "old_mode": 33188,
      "old_path": "gen/sources.gni",
      "new_id": "2f5232ae359c3cc4245dc5f53c4fb091ddb77244",
      "new_mode": 33188,
      "new_path": "gen/sources.gni"
    },
    {
      "type": "modify",
      "old_id": "79815599dec01ff435900c03956697b66a2aa771",
      "old_mode": 33188,
      "old_path": "gen/sources.json",
      "new_id": "c6f524447c43d0b93662cdb42262dfabbbef3fda",
      "new_mode": 33188,
      "new_path": "gen/sources.json"
    },
    {
      "type": "modify",
      "old_id": "947b59992bc77a44803b8c13b85e75a66f5ce2c4",
      "old_mode": 33188,
      "old_path": "gen/sources.mk",
      "new_id": "ac81b8f08dfc8e4c4ec97add65b7dfb305eb0447",
      "new_mode": 33188,
      "new_path": "gen/sources.mk"
    },
    {
      "type": "modify",
      "old_id": "72358f5e7dbaaef9e6bb10b0bc1c23e23a62eacd",
      "old_mode": 33188,
      "old_path": "pki/testdata/path_builder_unittest/mtc/mtc-config.json",
      "new_id": "a63b1023c7cbf87930790fc4529e5659be4420ad",
      "new_mode": 33188,
      "new_path": "pki/testdata/path_builder_unittest/mtc/mtc-config.json"
    },
    {
      "type": "modify",
      "old_id": "066f55ae0c41899e87234b67a4f819e72727514f",
      "old_mode": 33188,
      "old_path": "pki/testdata/verify_unittest/mtc-config.json",
      "new_id": "267687488ba8484302d216966f6f34b191edf20c",
      "new_mode": 33188,
      "new_path": "pki/testdata/verify_unittest/mtc-config.json"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "91612bb84c70a73e1e3f07cd9cc31bc1165a665b",
      "new_mode": 33188,
      "new_path": "pki/testdata/verify_unittest/mtc-leaf-unused-bit.pem"
    },
    {
      "type": "modify",
      "old_id": "a53ad5289d4f62cb2067a454b4438b579a4cbe6a",
      "old_mode": 33188,
      "old_path": "pki/testdata/verify_unittest/readme-mtc-certs.md",
      "new_id": "a8ebb6edfdd425c833259310ffc59f21f4f9a67b",
      "new_mode": 33188,
      "new_path": "pki/testdata/verify_unittest/readme-mtc-certs.md"
    },
    {
      "type": "modify",
      "old_id": "6e64deafb3387d8569d5aa84e45048553461b707",
      "old_mode": 33188,
      "old_path": "pki/verify_certificate_chain.cc",
      "new_id": "82792d605b3ff52763a87dc11f56929b12c715ff",
      "new_mode": 33188,
      "new_path": "pki/verify_certificate_chain.cc"
    },
    {
      "type": "modify",
      "old_id": "088de3c425a030ccc191933a23486241e2365fed",
      "old_mode": 33188,
      "old_path": "pki/verify_unittest.cc",
      "new_id": "b5b30a48b164b55421597ee2c2529e3bb93a6c80",
      "new_mode": 33188,
      "new_path": "pki/verify_unittest.cc"
    }
  ]
}