[stable32] fix(validation): harden signed file validation handling#7600

Merged

vitormattos merged 5 commits intostable32from

backport/7598/stable32

Apr 24, 2026

Commits on Apr 24, 2026

fix(validation): guard invalid signed file streams in CertificateChainService

vitormattos
authored and
backportbot-libresign[bot]
committed
fix(validation): guard invalid envelope signed file streams

vitormattos
authored and
backportbot-libresign[bot]
committed
fix(validation): tolerate runtime validation payload variations

vitormattos
authored and
backportbot-libresign[bot]
committed
test(validation): cover string-based runtime payload normalization

vitormattos
authored and
backportbot-libresign[bot]
committed
test(validation): cover invalid certificate chain stream handling

vitormattos
authored and
backportbot-libresign[bot]
committed