commit 5af04a71ff6ec779655d13522900dc6792cbc4c5
author Alexander Afanasyev <alexander.afanasyev@ucla.edu> Mon Jan 30 22:41:23 2017 -0800
committer Alexander Afanasyev <alexander.afanasyev@ucla.edu> Wed Mar 08 13:22:49 2017 -0800
tree 26a139e76d8059016990ac9960b8a22295842e5e
parent 95c8070b3e75380e81d347a8a4a405cae8fe7e9e

security: Fix certificate loop detection in v2::Validator

Change-Id: I0e55cd6ee9744df07fa13dcd8ee337909c49430f

src/security/v2/validator.cpp

diff --git a/src/security/v2/validator.cpp b/src/security/v2/validator.cpp
index 4928c67..6dc1f91 100644
--- a/src/security/v2/validator.cpp
+++ b/src/security/v2/validator.cpp
@@ -133,6 +133,12 @@
     return;
   }
 
+  if (state->hasSeenCertificateName(certRequest->m_interest.getName())) {
+    state->fail({ValidationError::Code::LOOP_DETECTED,
+                 "Validation loop detected for certificate `" + certRequest->m_interest.getName().toUri() + "`"});
+    return;
+  }
+
   NDN_LOG_DEBUG_DEPTH("Retrieving " << certRequest->m_interest.getName());
 
   auto cert = findTrustedCert(certRequest->m_interest);