DOC: Clarify comment on freeze attack test

to indicate the source of the freeze issue

Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
This commit is contained in:
Sebastien Awwad 2018-06-11 16:10:21 -04:00
parent 6373c26032
commit e9cd01e18a
No known key found for this signature in database
GPG key ID: BC0C6DEDD5E5CC03

View file

@ -407,9 +407,11 @@ def test_with_tuf(self):
#
# Serve the client expired Snapshot. The client should reject the given,
# expired Snapshot and the locally trusted one, which should now be out of
# date. After the attack, attempt to re-issue a valid Snapshot to verify
# that the client is able to recover from the indefinite freeze attack via
# the snapshot metadata.
# date.
# After the attack, attempt to re-issue a valid Snapshot to verify that
# the client is still able to update. A bug previously caused snapshot
# expiration or replay to result in an indefinite freeze; see
# github.com/theupdateframework/tuf/issues/736
repository = repo_tool.load_repository(self.repository_directory)
ts_key_file = os.path.join(self.keystore_directory, 'timestamp_key')