commit 138637a2ef4706e4b75631ab80851cfef2027e82
author Mate Toth-Pal <mate.toth-pal@arm.com> Thu Jul 28 10:57:06 2022 +0200
committer Anton Komlev <Anton.Komlev@arm.com> Wed Oct 05 17:46:05 2022 +0200
tree 5aae9816f47eace19f3d69e78abfcc0739e1568c
parent e589c453f9b94136e57e7a894c73301b2a0db346

Fix protected header handling

Also add tests for preventing regression

Change-Id: I89633df51b6fbbb11c70baee1d413ad43c1d5d83
Signed-off-by: Mate Toth-Pal <mate.toth-pal@arm.com>

iat-verifier/tests/synthetic_token_verifier.py

diff --git a/iat-verifier/tests/synthetic_token_verifier.py b/iat-verifier/tests/synthetic_token_verifier.py
index a66e8ad..f44c87d 100644
--- a/iat-verifier/tests/synthetic_token_verifier.py
+++ b/iat-verifier/tests/synthetic_token_verifier.py
@@ -31,7 +31,8 @@
         return None
 
     def _parse_p_header(self, msg):
-        pass
+        if (len(msg.protected_header) > 0):
+            raise ValueError('Unexpected protected header')
 
     def __init__(self, *, method, cose_alg, signing_key, configuration, internal_signing_key):
         # First prepare the claim hierarchy for this token
@@ -232,8 +233,8 @@
         return None
 
     def _parse_p_header(self, msg):
-        pass
-
+        if (len(msg.protected_header) > 0):
+            raise ValueError('Unexpected protected header')
 
     def _get_wrapping_tag(self):
         return 0xbbaa