Fix rule evaluation for TeamID and SigningID rules when encountering …

…broken signatures. (google#1120)
kyoshisuki · Jun 30, 2023 · d144e27 · d144e27
1 parent afc2c21
commit d144e27
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Source/santad/SNTPolicyProcessor.m b/Source/santad/SNTPolicyProcessor.m
@@ -65,6 +65,8 @@ - (nonnull SNTCachedDecision *)decisionForFileInfo:(nonnull SNTFileInfo *)fileIn
       csInfo = nil;
       cd.decisionExtra =
         [NSString stringWithFormat:@"Signature ignored due to error: %ld", (long)csInfoError.code];
+      cd.teamID = nil;
+      cd.signingID = nil;
     } else {
       cd.certSHA256 = csInfo.leafCertificate.SHA256;
       cd.certCommonName = csInfo.leafCertificate.commonName;