diff options
| author | Brian P. Hinz <bphinz@users.sf.net> | 2020-09-08 10:13:32 +0200 |
|---|---|---|
| committer | Pierre Ossman <ossman@cendio.se> | 2020-09-08 14:14:49 +0200 |
| commit | 20dea801e747318525a5859fe4f37c52b05310cb (patch) | |
| tree | 3151c256dbaab80b1e341094db4cc7ad19d60e0b /jpeg/jdhuff.h | |
| parent | 7399eab79a4365434d26494fa1628ce1eb91562b (diff) | |
| download | tigervnc-20dea801e747318525a5859fe4f37c52b05310cb.tar.gz tigervnc-20dea801e747318525a5859fe4f37c52b05310cb.zip | |
Properly store certificate exceptions in Java viewer
Like the native viewer, the Java viewer didn't store certificate
exceptions properly. Whilst not as bad as the native viewer, it still
failed to check that a stored certificate wouldn't be maliciously used
for another server. In practice this can in most cases be used to
impersonate another server.
Handle this like the native viewer by storing exceptions for a specific
hostname/certificate combination.
(cherry picked from commit f029745f63ac7d22fb91639b2cb5b3ab56134d6e)
Diffstat (limited to 'jpeg/jdhuff.h')
0 files changed, 0 insertions, 0 deletions