d322517 pkg repo signing_command: Detect if the command fails and fail early — HardenedBSD-pkg

rad:z3QDZAW2FAfuLvihrhiyDC9fAD8G9

HardenedBSD Package Manager

pkg repo signing_command: Detect if the command fails and fail early

Bryan Drewery committed 12 years ago

commit d32251745358f37728c8dbc41fbbb4c56d9effbb
parent 65f7b53

1 file changed +11 -6

modified libpkg/pkg_repo.c

@@ -40,6 +40,7 @@

 #define _WITH_GETLINE
 #include <stdio.h>
 #include <stdbool.h>
 #include <sysexits.h>
 #include <unistd.h>
 #include "pkg.h"

@@ -443,7 +444,7 @@ cmd_sign(char *path, char **argv, int argc, struct sbuf **sig, struct sbuf **cer

 	char *line = NULL;
 	size_t linecap = 0;
 	ssize_t linelen;
 	int i;
 	int i, ret = EPKG_OK;
 	if (sha256_file(path, sha256) != EPKG_OK)
 		return (EPKG_FATAL);

@@ -459,12 +460,17 @@ cmd_sign(char *path, char **argv, int argc, struct sbuf **sig, struct sbuf **cer

 	sbuf_done(cmd);
 	if ((fp = popen(sbuf_data(cmd), "r+")) == NULL) {
 		sbuf_delete(cmd);
 		return (EPKG_FATAL);
 		ret = EPKG_FATAL;
 		goto done;
 	}
 	fprintf(fp, "%s\n", sha256);
 	if (pclose(fp) != EX_OK) {
 		ret = EPKG_FATAL;
 		goto done;
 	}
 	if (*sig == NULL)
 		*sig = sbuf_new_auto();
 	if (*cert == NULL)

@@ -491,12 +497,11 @@ cmd_sign(char *path, char **argv, int argc, struct sbuf **sig, struct sbuf **cer

 	sbuf_finish(*sig);
 	sbuf_finish(*cert);
 done:
 	if (cmd)
 		sbuf_delete(cmd);
 	pclose(fp);
 	return (EPKG_OK);
 	return (ret);
 }
 static int