Long overdue cleanup of X509 policy tree verification
authorViktor Dukhovni <openssl-users@dukhovni.org>
Mon, 1 Feb 2016 02:14:51 +0000 (21:14 -0500)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Fri, 5 Feb 2016 16:13:11 +0000 (11:13 -0500)
commit895c2f84a6a083fc8b9f69f962ed19da12ce3b40
tree2b338ff7dc3044f48040efe9f77af3ac5bd9c1e5
parenta0474357743b5cc4db1b5428ac3db85b1168d3a9
Long overdue cleanup of X509 policy tree verification

Replace all magic numbers with #defined constants except in boolean
functions that return 0 for failure and 1 for success.  Avoid a
couple memory leaks in error recovery code paths.  Code style
improvements.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
crypto/x509/x509_vfy.c
crypto/x509v3/pcy_node.c
crypto/x509v3/pcy_tree.c
include/openssl/x509_vfy.h