commit 3667bfea8164c0d2db088b7b6f3d8db38b1a6e62
parent 93f3a7df565f65c736a3dfa5360f92ffd52d5a9f
Author: Florian Dold <florian@dold.me>
Date: Thu, 9 Oct 2025 21:45:27 +0200
wallet-core: fix broken rsa signature check
Condition was always true. Discovered by Ivan.
Diffstat:
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/packages/taler-wallet-core/src/withdraw.ts b/packages/taler-wallet-core/src/withdraw.ts
@@ -1960,13 +1960,13 @@ async function processPlanchetVerifyAndStoreCoin(
pk: planchetDenomPub.rsa_public_key,
});
- const isValid = await wex.cryptoApi.rsaVerify({
+ const rsaVerifyResp = await wex.cryptoApi.rsaVerify({
hm: planchet.coinPub,
pk: planchetDenomPub.rsa_public_key,
sig: denomSigRsa.sig,
});
- if (!isValid) {
+ if (!rsaVerifyResp.valid) {
await wex.db.runReadWriteTx({ storeNames: ["planchets"] }, async (tx) => {
const planchet = await tx.planchets.indexes.byGroupAndIndex.get([
withdrawalGroup.withdrawalGroupId,