Cosmetic touchups.

diff --git a/ssl/ssl_cert.c b/ssl/ssl_cert.c
index 491f5273310097c854b438efba74591e9d4e6785..1180f15227b3e688f27ce90778c77edc81e8ac8f 100644 (file)
--- a/ssl/ssl_cert.c
+++ b/ssl/ssl_cert.c
@@ -350,15 +350,15 @@ CERT *ssl_cert_dup(CERT *cert)
                if (cert->pkeys[i].serverinfo != NULL)
                        {
                        /* Just copy everything. */
-                       ret->pkeys[i].serverinfo_length =
-                               cert->pkeys[i].serverinfo_length;
                        ret->pkeys[i].serverinfo =
-                               OPENSSL_malloc(ret->pkeys[i].serverinfo_length);
+                               OPENSSL_malloc(cert->pkeys[i].serverinfo_length);
                        if (ret->pkeys[i].serverinfo == NULL)
                                {
                                SSLerr(SSL_F_SSL_CERT_DUP, ERR_R_MALLOC_FAILURE);
                                return NULL;
                                }
+                       ret->pkeys[i].serverinfo_length =
+                               cert->pkeys[i].serverinfo_length;
                        memcpy(ret->pkeys[i].serverinfo,
                               cert->pkeys[i].serverinfo,
                               cert->pkeys[i].serverinfo_length);
@@ -488,6 +488,7 @@ void ssl_cert_clear_certs(CERT *c)
                        {
                        OPENSSL_free(cpk->serverinfo);
                        cpk->serverinfo = NULL;
+                       cpk->serverinfo_length = 0;
                        }
 #endif
                /* Clear all flags apart from explicit sign */

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 14634e2406384efe0fda0bb3a87298513211a665..541efba064b2f8ebd4d362cbfc7e49b70922df6e 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1715,16 +1715,17 @@ int SSL_CTX_set_custom_cli_ext(SSL_CTX *ctx, unsigned short ext_type,
                               custom_cli_ext_first_cb_fn fn1, 
                               custom_cli_ext_second_cb_fn fn2, void* arg)
        {
-       /* Check for duplicates */
        size_t i;
        custom_cli_ext_record* record;
 
+       /* Check for duplicates */
        for (i=0; i < ctx->custom_cli_ext_records_count; i++)
                if (ext_type == ctx->custom_cli_ext_records[i].ext_type)
                        return 0;
 
        ctx->custom_cli_ext_records = OPENSSL_realloc(ctx->custom_cli_ext_records,
-                                                                                                               (ctx->custom_cli_ext_records_count+1) * sizeof(custom_cli_ext_record));
+                                                     (ctx->custom_cli_ext_records_count + 1) * 
+                                                     sizeof(custom_cli_ext_record));
        if (!ctx->custom_cli_ext_records) {
                ctx->custom_cli_ext_records_count = 0;
                return 0;
@@ -1739,19 +1740,20 @@ int SSL_CTX_set_custom_cli_ext(SSL_CTX *ctx, unsigned short ext_type,
        }
 
 int SSL_CTX_set_custom_srv_ext(SSL_CTX *ctx, unsigned short ext_type,
-                                                                                                                        custom_srv_ext_first_cb_fn fn1, 
-                                                                                                                        custom_srv_ext_second_cb_fn fn2, void* arg)
+                              custom_srv_ext_first_cb_fn fn1, 
+                              custom_srv_ext_second_cb_fn fn2, void* arg)
        {
-       /* Check for duplicates */
        size_t i;
        custom_srv_ext_record* record;
 
+       /* Check for duplicates */      
        for (i=0; i < ctx->custom_srv_ext_records_count; i++)
                if (ext_type == ctx->custom_srv_ext_records[i].ext_type)
                        return 0;
 
        ctx->custom_srv_ext_records = OPENSSL_realloc(ctx->custom_srv_ext_records,
-                                                                                                               (ctx->custom_srv_ext_records_count+1) * sizeof(custom_srv_ext_record));
+                                                     (ctx->custom_srv_ext_records_count + 1) * 
+                                                     sizeof(custom_srv_ext_record));
        if (!ctx->custom_srv_ext_records) {
                ctx->custom_srv_ext_records_count = 0;
                return 0;

diff --git a/ssl/ssl_rsa.c b/ssl/ssl_rsa.c
index 507a3d17739b1728ccaa9af1d3fe1efe2e0492be..77abcfce8318a9a870d07466a5592ec1fff237d8 100644 (file)
--- a/ssl/ssl_rsa.c
+++ b/ssl/ssl_rsa.c
@@ -1096,7 +1096,7 @@ int SSL_CTX_use_serverinfo(SSL_CTX *ctx, const unsigned char *serverinfo,
                return 0;
                }
        ctx->cert->key->serverinfo = OPENSSL_realloc(ctx->cert->key->serverinfo,
-                                                                                               serverinfo_length);
+                                                    serverinfo_length);
        if (ctx->cert->key->serverinfo == NULL)
                {
                SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO,ERR_R_MALLOC_FAILURE);

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 8d680a1bfe5c3364db5d90aa51e600d6d1b2c243..decc94d1a335e10d947bb2c28918550fae2a0862 100644 (file)
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -2325,19 +2325,19 @@ static int ssl_scan_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char
                                record = &s->ctx->custom_srv_ext_records[i];
                                if (type == record->ext_type)
                                        {
-                                       /* Error on duplicate TLS Extensions */
                                        size_t j;
 
+                                       /* Error on duplicate TLS Extensions */
                                        for (j = 0; j < s->s3->tlsext_custom_types_count; j++)
                                                {
-                                               if (s->s3->tlsext_custom_types[j] == type)
+                                               if (type == s->s3->tlsext_custom_types[j])
                                                        {
                                                        *al = TLS1_AD_DECODE_ERROR;
                                                        return 0;
                                                        }
                                                }
 
-                                       /* Callback */
+                                       /* NULL callback still notes the extension */ 
                                        if (record->fn1 && !record->fn1(s, type, data, size, al, record->arg))
                                                return 0;
                                                
@@ -2345,7 +2345,7 @@ static int ssl_scan_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char
                                        s->s3->tlsext_custom_types_count++;
                                        s->s3->tlsext_custom_types = OPENSSL_realloc(
                                                        s->s3->tlsext_custom_types,
-                                                       s->s3->tlsext_custom_types_count*2);
+                                                       s->s3->tlsext_custom_types_count * 2);
                                        if (s->s3->tlsext_custom_types == NULL)
                                                {
                                                s->s3->tlsext_custom_types = 0;
@@ -2353,7 +2353,7 @@ static int ssl_scan_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char
                                                return 0;
                                                }
                                        s->s3->tlsext_custom_types[
-                                                       s->s3->tlsext_custom_types_count-1] = type;
+                                                       s->s3->tlsext_custom_types_count - 1] = type;
                                        }                                               
                                }
                        }