PR: 1899
authorDr. Stephen Henson <steve@openssl.org>
Wed, 15 Apr 2009 15:07:09 +0000 (15:07 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 15 Apr 2009 15:07:09 +0000 (15:07 +0000)
Submitted by: Ger Hobbelt <ger@hobbelt.com>
Approved by: steve@openssl.org

Check for <= 0 when verifying CRL issuers.

crypto/x509/x509_vfy.c

index f662124..9ff66cf 100644 (file)
@@ -1124,7 +1124,7 @@ static int check_crl_path(X509_STORE_CTX *ctx, X509 *x)
        /* Verify CRL issuer */
        ret = X509_verify_cert(&crl_ctx);
 
-       if (!ret)
+       if (ret <= 0)
                goto err;
 
        /* Check chain is acceptable */