From: Dr. Stephen Henson <steve@openssl.org>
Date: Thu, 22 Oct 2009 23:12:05 +0000 (+0000)
Subject: Need to check <= 0 here.
X-Git-Tag: OpenSSL-fips-2_0-rc1~1476
X-Git-Url: https://git.openssl.org/?p=openssl.git;a=commitdiff_plain;h=d11d977da4bcb73ee94a09606c7be5100db9eec3;ds=sidebyside

Need to check <= 0 here.
---

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index c680980f8a..d1a15502a2 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1387,7 +1387,7 @@ static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)
 
 			if (!(ctx->current_crl_score & CRL_SCORE_SAME_PATH))
 				{
-				if (!check_crl_path(ctx, ctx->current_issuer))
+				if (check_crl_path(ctx, ctx->current_issuer) <= 0)
 					{
 					ctx->error = X509_V_ERR_CRL_PATH_VALIDATION_ERROR;
 					ok = ctx->verify_cb(0, ctx);