mirror of
https://github.com/f-droid/fdroidserver.git
synced 2026-10-04 03:14:41 -04:00
๐ publish: fix exit status integer overflow
publish.py currently uses the number of failed verifications as exit status. `sys.exit(failed)` Whenever the number of failed verification attempts is divisible by 256 the return status is 0. exit status 0 however conveys that there were no errors, so as long as an attacker can controll the number of verification failures they can use this to turn off verification alltogether.
This commit is contained in:
500 Internal Server Error
Gitea Version: 1.28.0+dev-477-g8b6ad49a5f