diff -Nru buildchain-0.4.8~1552097899~18.04~838ef2e/Cargo.lock buildchain-0.4.9~1552486898~18.04~097d09f/Cargo.lock --- buildchain-0.4.8~1552097899~18.04~838ef2e/Cargo.lock 2019-03-09 02:18:19.000000000 +0000 +++ buildchain-0.4.9~1552486898~18.04~097d09f/Cargo.lock 2019-03-13 14:21:38.000000000 +0000 @@ -81,7 +81,7 @@ [[package]] name = "buildchain" -version = "0.4.8" +version = "0.4.9" dependencies = [ "base32 0.4.0 (registry+https://github.com/rust-lang/crates.io-index)", "clap 2.32.0 (registry+https://github.com/rust-lang/crates.io-index)", diff -Nru buildchain-0.4.8~1552097899~18.04~838ef2e/Cargo.toml buildchain-0.4.9~1552486898~18.04~097d09f/Cargo.toml --- buildchain-0.4.8~1552097899~18.04~838ef2e/Cargo.toml 2019-03-09 02:18:19.000000000 +0000 +++ buildchain-0.4.9~1552486898~18.04~097d09f/Cargo.toml 2019-03-13 14:21:38.000000000 +0000 @@ -1,6 +1,6 @@ [package] name = "buildchain" -version = "0.4.8" +version = "0.4.9" authors = ["Jeremy Soller "] description = "Software for creating and managing a distributed and reproducible chain of builds" documentation = "https://docs.rs/buildchain" diff -Nru buildchain-0.4.8~1552097899~18.04~838ef2e/debian/changelog buildchain-0.4.9~1552486898~18.04~097d09f/debian/changelog --- buildchain-0.4.8~1552097899~18.04~838ef2e/debian/changelog 2019-03-09 02:18:19.000000000 +0000 +++ buildchain-0.4.9~1552486898~18.04~097d09f/debian/changelog 2019-03-13 14:21:38.000000000 +0000 @@ -1,6 +1,6 @@ -buildchain (0.4.8~1552097899~18.04~838ef2e) bionic; urgency=medium +buildchain (0.4.9~1552486898~18.04~097d09f) bionic; urgency=medium * Auto Build - -- Pop OS (ISO Signing Key) Fri, 8 Mar 2019 19:18:19 -0700 + -- Pop OS (ISO Signing Key) Wed, 13 Mar 2019 08:21:38 -0600 diff -Nru buildchain-0.4.8~1552097899~18.04~838ef2e/src/block.rs buildchain-0.4.9~1552486898~18.04~097d09f/src/block.rs --- buildchain-0.4.8~1552097899~18.04~838ef2e/src/block.rs 2019-03-09 02:18:19.000000000 +0000 +++ buildchain-0.4.9~1552486898~18.04~097d09f/src/block.rs 2019-03-13 14:21:38.000000000 +0000 @@ -42,7 +42,8 @@ Err(()) => return Err(format!("signature invalid")), } - if m != sm { + // Check that message matches signed message after skipping the signature + if m != &sm[64..] { return Err(format!("message data invalid")); } }