[cpp-opensaml] branch maint-2 updated: CPPOST-100 - Assertions20SchemaValidator requires unencrypted Attributes

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch maint-2
in repository cpp-opensaml.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-opensaml.git;a=commit;h=98724ab1055da940d15db628b63e3d06e0e34ba7

The following commit(s) were added to refs/heads/maint-2 by this push:
       new  98724ab   CPPOST-100 - Assertions20SchemaValidator requires unencrypted Attributes
98724ab is described below

commit 98724ab1055da940d15db628b63e3d06e0e34ba7
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Sun Nov 12 17:09:43 2017 -0500

    CPPOST-100 - Assertions20SchemaValidator requires unencrypted Attributes
    
    Assertions20SchemaValidator fails in case of EncryptedAttribute in Assertions
---
 saml/saml2/core/impl/Assertions20SchemaValidators.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/saml/saml2/core/impl/Assertions20SchemaValidators.cpp b/saml/saml2/core/impl/Assertions20SchemaValidators.cpp
index 9048bfb..d639cc0 100644
--- a/saml/saml2/core/impl/Assertions20SchemaValidators.cpp
+++ b/saml/saml2/core/impl/Assertions20SchemaValidators.cpp
@@ -166,7 +166,8 @@ namespace opensaml {
         END_XMLOBJECTVALIDATOR;
 
         BEGIN_XMLOBJECTVALIDATOR(SAML_DLLLOCAL,AttributeStatement);
-            XMLOBJECTVALIDATOR_NONEMPTY(AttributeStatement,Attribute);
+            if (!ptr->hasChildren())
+                throw ValidationException("AttributeStatement must have at least one child element.");
         END_XMLOBJECTVALIDATOR;
 
         BEGIN_XMLOBJECTVALIDATOR(SAML_DLLLOCAL,Assertion);

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.