Bug 16170 – libgpg: gpg_verify_signature no algorithm returned on non english locales

Bug 16170 - libgpg: gpg_verify_signature no algorithm returned on non english locales

Summary:

libgpg: gpg_verify_signature no algorithm returned on non english locales

Status:	RESOLVED DUPLICATE of bug 14705

Product:	Sorcery
Classification:	Unclassified
Component:	subroutines
Version:	1.16.x
Platform:	All Linux

Importance:	P2 major
Assigned To:	Sorcery Bug List

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2024-01-26 14:48 UTC by badewo16.kuyoho30
Modified:	2024-01-27 16:47 UTC (History)
CC List:	2 users (show)

See Also:

Attachments
Fix: change LC_ALL to LANGUAGE (909 bytes, patch) 2024-01-26 15:18 UTC, badewo16.kuyoho30	Details \| Diff
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description badewo16.kuyoho30 2024-01-26 14:48:01 UTC

In libgpg at line 66 there is a call to awk. This fails to actually get the algorithm if the output of gpg is not english as it is searching for an string in that language.

This causes the signature verification to fail when casting.

A possible fix would be to pass the list of allowed hashes to gpg_verify_signature and grep for them in the output of the gpg command.

Comment 1 badewo16.kuyoho30 2024-01-26 15:18:34 UTC

Created attachment 7633 [details]
Fix: change LC_ALL to LANGUAGE

Comment 2 Ismael Luceno 2024-01-27 16:47:57 UTC

The patch is problematic, see the original bug report on this issue.

*** This bug has been marked as a duplicate of bug 14705 ***