fs-verity: don't pass whole descriptor to fsverity_verify_signature()
authorEric Biggers <ebiggers@google.com>
Fri, 15 Jan 2021 18:18:15 +0000 (10:18 -0800)
committerEric Biggers <ebiggers@google.com>
Sun, 7 Feb 2021 22:51:09 +0000 (14:51 -0800)
commitfab634c4de4604aefaaa9dc25d0e1a2cb7a961ab
tree48f94c89cb86c43b472738346720887757e839e2
parentc2c8261151b32f1956fc4ecd71c9a3e7972084b6
fs-verity: don't pass whole descriptor to fsverity_verify_signature()

Now that fsverity_get_descriptor() validates the sig_size field,
fsverity_verify_signature() doesn't need to do it.

Just change the prototype of fsverity_verify_signature() to take the
signature directly rather than take a fsverity_descriptor.

Link: https://lore.kernel.org/r/20210115181819.34732-3-ebiggers@kernel.org
Reviewed-by: Victor Hsieh <victorhsieh@google.com>
Reviewed-by: Jaegeuk Kim <jaegeuk@kernel.org>
Reviewed-by: Amy Parker <enbyamy@gmail.com>
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Eric Biggers <ebiggers@google.com>
fs/verity/fsverity_private.h
fs/verity/open.c
fs/verity/signature.c