From 04afefcba2a7be71a253df875f2a289cc2fb4b48 Mon Sep 17 00:00:00 2001 From: Roman Zeyde Date: Sat, 4 Jul 2015 21:15:49 +0300 Subject: [PATCH] protocol: verify EOF after parsing at sign_message() --- sshagent/protocol.py | 1 + 1 file changed, 1 insertion(+) diff --git a/sshagent/protocol.py b/sshagent/protocol.py index 9d325c6..e65a8fe 100644 --- a/sshagent/protocol.py +++ b/sshagent/protocol.py @@ -68,6 +68,7 @@ class Handler(object): log.debug('looking for %s', key['fingerprint']) blob = util.read_frame(buf) assert util.read_frame(buf) == b'' + assert not buf.read() for k in self.public_keys: if (k['fingerprint']) == (key['fingerprint']):