From f1a4c16fd592d1b3260a7fdc8254cab042e23821 Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Fri, 14 Aug 2026 14:33:57 +0200 Subject: [PATCH] Reject invalid certificate occurrence as wrong P1P2 Signed-off-by: Pol Henarejos --- src/openpgp/cmd_select_data.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/openpgp/cmd_select_data.c b/src/openpgp/cmd_select_data.c index 8c2eca6..2c99f29 100644 --- a/src/openpgp/cmd_select_data.c +++ b/src/openpgp/cmd_select_data.c @@ -47,9 +47,12 @@ int cmd_select_data(void) { else { return SW_WRONG_DATA(); } - if (fid != EF_CH_CERT || P1(apdu) >= 3) { + if (fid != EF_CH_CERT) { return SW_REFERENCE_NOT_FOUND(); } + if (P1(apdu) >= 3) { + return SW_WRONG_P1P2(); + } if (!(ef = file_search_by_fid(fid, NULL, SPECIFY_EF))) { return SW_REFERENCE_NOT_FOUND(); }