From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 13 Jul 2008 22:38:18 +0000 (+0000)
Subject: Zero is a valid value for any_skip and map_skip
X-Git-Tag: OpenSSL_0_9_8k^2~306
X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff_plain;h=34d05a402325411ff80cb8aa90044550556db2bd

Zero is a valid value for any_skip and map_skip
---

diff --git a/crypto/x509v3/pcy_tree.c b/crypto/x509v3/pcy_tree.c
index aed0155c2a..846d3eae04 100644
--- a/crypto/x509v3/pcy_tree.c
+++ b/crypto/x509v3/pcy_tree.c
@@ -203,7 +203,7 @@ static int tree_init(X509_POLICY_TREE **ptree, STACK_OF(X509) *certs,
 		else
 			{
 			any_skip--;
-			if ((cache->any_skip > 0)
+			if ((cache->any_skip >= 0)
 				&& (cache->any_skip < any_skip))
 				any_skip = cache->any_skip;
 			}
@@ -213,7 +213,7 @@ static int tree_init(X509_POLICY_TREE **ptree, STACK_OF(X509) *certs,
 		else
 			{
 			map_skip--;
-			if ((cache->map_skip > 0)
+			if ((cache->map_skip >= 0)
 				&& (cache->map_skip < map_skip))
 				map_skip = cache->map_skip;
 			}