The indexes returned by ***_get_ex_new_index() functions are used when

[openssl.git] / crypto / x509 / x509_vfy.c

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 0b9ae12a6f12a3bad3419d8ebe5823a4e7e0c119..4c3aae73a9a58b1223575ea9786b82cef933f5a6 100644 (file)
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -895,10 +895,10 @@ int X509_STORE_CTX_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_fu
         * That function uses locking, so we don't (usually)
         * have to worry about locking here. For the whole cruel
         * truth, see crypto/ex_data.c */
-       x509_store_ctx_num++;
-       return CRYPTO_get_ex_new_index(x509_store_ctx_num-1,
-               &x509_store_ctx_method,
-               argl,argp,new_func,dup_func,free_func);
+       if(CRYPTO_get_ex_new_index(x509_store_ctx_num, &x509_store_ctx_method,
+                       argl, argp, new_func, dup_func, free_func) < 0)
+               return -1;
+       return (x509_store_ctx_num++);
        }
 
 int X509_STORE_CTX_set_ex_data(X509_STORE_CTX *ctx, int idx, void *data)