| Index: net/http/http_response_info.cc
|
| diff --git a/net/http/http_response_info.cc b/net/http/http_response_info.cc
|
| index 4328b7ae2b64b9ab5680f67dc9fed463aebc2f00..e4bb70f94d136d287c7ab647db6a90b0fc42d601 100644
|
| --- a/net/http/http_response_info.cc
|
| +++ b/net/http/http_response_info.cc
|
| @@ -10,6 +10,7 @@
|
| #include "net/base/auth.h"
|
| #include "net/base/io_buffer.h"
|
| #include "net/base/net_errors.h"
|
| +#include "net/cert/sct_status_flags.h"
|
| #include "net/cert/signed_certificate_timestamp.h"
|
| #include "net/cert/x509_certificate.h"
|
| #include "net/http/http_response_headers.h"
|
| @@ -239,6 +240,8 @@ bool HttpResponseInfo::InitFromPickle(const base::Pickle& pickle,
|
| uint16_t status;
|
| if (!sct.get() || !iter.ReadUInt16(&status))
|
| return false;
|
| + if (!net::ct::IsValidSCTStatus(status))
|
| + return false;
|
| ssl_info.signed_certificate_timestamps.push_back(
|
| SignedCertificateTimestampAndStatus(
|
| sct, static_cast<ct::SCTVerifyStatus>(status)));
|
|
|