Fix endianness issue in pubkey perms handling

MatthiasValvekens · Mar 25, 2024 · 0c14dfe · 0c14dfe
1 parent 3308911
commit 0c14dfe
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/pyhanko/pdf_utils/crypt/pubkey.py b/pyhanko/pdf_utils/crypt/pubkey.py
@@ -164,7 +164,7 @@ def add_recipients(
         new_cms = construct_recipient_cms(
             certs,
             self._recp_key_seed,
-            as_signed(perms),
+            perms & 0xFFFFFFFF,
             policy=policy,
             include_permissions=self.acts_as_default,
         )
@@ -310,7 +310,7 @@ def construct_envelope_content(
     seed: bytes, perms: int, include_permissions=True
 ):
     assert len(seed) == 20
-    return seed + (struct.pack('<i', perms) if include_permissions else b'')
+    return seed + (struct.pack('>I', perms) if include_permissions else b'')
 
 
 def _rsaes_pkcs1v15_recipient(
@@ -1123,7 +1123,7 @@ def read_seed_from_recipient_cms(
     perms: Optional[int] = None
     if len(content) == 24:
         # permissions are included
-        perms = struct.unpack('<i', content[20:])[0]
+        perms = struct.unpack('>I', content[20:])[0]
     return seed, perms