Don't allow INS_PUT_DATA without admin auth

Fix #10
arekinath · Sep 6, 2018 · 1c7c9c1 · 1c7c9c1
1 parent 736e1bb
commit 1c7c9c1
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/net/cooperi/pivapplet/PivApplet.java b/src/net/cooperi/pivapplet/PivApplet.java
@@ -1370,6 +1370,12 @@ public class PivApplet extends Applet implements ExtendedLength
 			return;
 		}
 
+		if (!slot9b.flags[PivSlot.F_UNLOCKED]) {
+			ISOException.throwIt(
+			    ISO7816.SW_SECURITY_STATUS_NOT_SATISFIED);
+			return;
+		}
+
 		if (tlv.tagLength() == (short)3 &&
 		    tlv.readByte() == (byte)0x5F &&
 		    tlv.readByte() == (byte)0xC1) {