X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=crypto%2Fx509%2Fx509_vfy.c;h=7a7fc59e779514e951f25e9e7f80099ba417535d;hp=a920ea70b1500a59a355a5e52cdaad48fd40fa25;hb=2aacec8f4a5ba1b365620a7b17fcce311ada93ad;hpb=9cf315ef90d0cfeb8bb7a38873eea07a8f0dffec

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index a920ea70b1..7a7fc59e77 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -392,8 +392,8 @@ int X509_verify_cert(X509_STORE_CTX *ctx)
                         xtmp = sk_X509_pop(ctx->chain);
                         X509_free(xtmp);
                         num--;
-                        ctx->last_untrusted--;
                     }
+                    ctx->last_untrusted = sk_X509_num(ctx->chain);
                     retry = 1;
                     break;
                 }