From cf51aa1421f7a1046c282a2d38e08a3f9636cd83 Mon Sep 17 00:00:00 2001 From: Ingo Franzki Date: Tue, 30 Jun 2026 15:23:55 +0200 Subject: [PATCH] libseckey: Fix incorrect flag checking related to RSA X9.31 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Use a bit-wise AND, not a logical AND to mask the flag out of the flags field. Assisted-by: IBM Bob:2.0.0 Signed-off-by: Ingo Franzki Reviewed-by: Finn Callies Signed-off-by: Jan Höppner --- libseckey/sk_ep11.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libseckey/sk_ep11.c b/libseckey/sk_ep11.c index 119e8f50..6fd1fbe6 100644 --- a/libseckey/sk_ep11.c +++ b/libseckey/sk_ep11.c @@ -708,7 +708,7 @@ static int sk_ep11_rsa_sign(const unsigned char *key_token, case RSA_X931_PADDING: mech.mechanism = CKM_RSA_X9_31; - if ((hdr->flags && PKEY_TYPE_EP11_FLAG_X9_31) == 0) { + if ((hdr->flags & PKEY_TYPE_EP11_FLAG_X9_31) == 0) { sk_debug(debug, "ERROR: no RSA X9.31 key"); return -EINVAL; }