From 28140f90e800f37adea0cdcc3fd29a64f071c8eb Mon Sep 17 00:00:00 2001 From: Marcello Stanisci Date: Fri, 27 Jul 2018 16:34:19 +0200 Subject: [PATCH] Verifying /track/transfer response signature. --- src/exchange-lib/exchange_api_track_transfer.c | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/src/exchange-lib/exchange_api_track_transfer.c b/src/exchange-lib/exchange_api_track_transfer.c index 5bd672742..96ff481e7 100644 --- a/src/exchange-lib/exchange_api_track_transfer.c +++ b/src/exchange-lib/exchange_api_track_transfer.c @@ -196,6 +196,17 @@ check_track_transfer_response_ok (struct TALER_EXCHANGE_TrackTransferHandle *wdh GNUNET_JSON_parse_free (spec); return GNUNET_SYSERR; } + if (GNUNET_OK != GNUNET_CRYPTO_eddsa_verify + (TALER_SIGNATURE_EXCHANGE_CONFIRM_WIRE_DEPOSIT, + &wdp.purpose, + &exchange_sig.eddsa_signature, + &exchange_pub.eddsa_pub)) + { + GNUNET_break_op (0); + GNUNET_JSON_parse_free (spec); + return GNUNET_SYSERR; + } + if (GNUNET_OK != TALER_amount_subtract (&total_expected, &total_expected,