Extend the index parameter checking from sk_value to sk_set(). Also tidy up

some similar code elsewhere.

Thanks to Francesco Petruzzi for bringing this to my attention.

diff --git a/crypto/stack/stack.c b/crypto/stack/stack.c
index 821b6caca5227ff249b8dc4859e9d4baaa0a3af8..9cc0a8296235dd1bdedab8f63a89d02ca1b3d3f6 100644 (file)
--- a/crypto/stack/stack.c
+++ b/crypto/stack/stack.c
@@ -192,8 +192,7 @@ char *sk_delete(STACK *st, int loc)
        char *ret;
        int i,j;
 
-       if ((st == NULL) || (st->num == 0) || (loc < 0)
-                                        || (loc >= st->num)) return(NULL);
+       if(!st || (loc < 0) || (loc >= st->num)) return NULL;
 
        ret=st->data[loc];
        if (loc != st->num-1)
@@ -313,7 +312,7 @@ char *sk_value(const STACK *st, int i)
 
 char *sk_set(STACK *st, int i, char *value)
 {
-       if(st == NULL) return NULL;
+       if(!st || (i < 0) || (i >= st->num)) return NULL;
        return (st->data[i] = value);
 }