vsajip/python-gnupg

VALIDSIG may not have trailing fingerprint

sebbASF opened this issue · 0 comments

self.pubkey_fingerprint = value.split()[-1]

According to the DETAILS document, VALIDSIG may not have trailing fingerprint.

Also it's not unknown for additional trailing parameters to be added in later versions.

It would be safer to check the number of parameters and use a fixed positive index