Need to check <= 0 here.
authorDr. Stephen Henson <steve@openssl.org>
Thu, 22 Oct 2009 23:14:12 +0000 (23:14 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Thu, 22 Oct 2009 23:14:12 +0000 (23:14 +0000)
crypto/x509/x509_vfy.c

index c680980f8a2c15198be74667bb93b0e0218be46e..d1a15502a27bcca6a86003dec3bcf9bcc8dd9505 100644 (file)
@@ -1387,7 +1387,7 @@ static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)
 
                        if (!(ctx->current_crl_score & CRL_SCORE_SAME_PATH))
                                {
-                               if (!check_crl_path(ctx, ctx->current_issuer))
+                               if (check_crl_path(ctx, ctx->current_issuer) <= 0)
                                        {
                                        ctx->error = X509_V_ERR_CRL_PATH_VALIDATION_ERROR;
                                        ok = ctx->verify_cb(0, ctx);