| Subject: | Crypt::RSA::SS::PSS |
Hi! I find bug in Crypt::RSA::SS::PSS.
sub verify {
my ($self, %params) = @_;
...
return 1 if $self->verify_with_salt_recovery ($M, $em1);
print $self->errstr; # bug :)
return $self->error ("Invalid signature.", \$M, \$S, $key, \%params);
}
Print errstr into STDOUT is bad idea!
If I write cgi script, this errstr will be interpretation by server as
HTTP header and cgi script will die.
I fixed it - remove string "print ..." :)
Anatoly Sharifulin.
www: http://www.sharifulin.ru/
lj: http://sharifulin.livejournal.com/tag/crypt::rsa