From 80b8b205075d37e28a150b3774027dd3db044ed5 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Apr 2026 10:41:54 +0100 Subject: [PATCH] ax(ueps): fix inaccurate usage example in ReadAndVerify default case The comment omitted tagValueLength from the signedData write sequence, making it an incorrect usage example (AX Principle 2). Co-Authored-By: Charon --- pkg/ueps/reader.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/ueps/reader.go b/pkg/ueps/reader.go index 52fb932..c04954b 100644 --- a/pkg/ueps/reader.go +++ b/pkg/ueps/reader.go @@ -85,7 +85,7 @@ func ReadAndVerify(reader *bufio.Reader, sharedSecret []byte) (*ParsedPacket, er case TagHMAC: hmacSignature = tagValue default: - // signedData.WriteByte(tagByte); signedData.Write(tagValue) — unknown tags contribute to HMAC, blocking injection + // signedData.WriteByte(tagByte); signedData.WriteByte(tagValueLength); signedData.Write(tagValue) — unknown tags contribute to HMAC, blocking injection signedData.WriteByte(tagByte) signedData.WriteByte(tagValueLength) signedData.Write(tagValue)