ASN1_item_verify needs to initialize ctx before any "goto err" can

happen; the new code for the OID cross reference table failed to do so.

diff --git a/crypto/asn1/a_verify.c b/crypto/asn1/a_verify.c
index 4885539c262ef95a2ae56c1de8722d6a9c7d8c6a..cecdb13c70901ab77367c563a1000dcaecaf0cff 100644 (file)
--- a/crypto/asn1/a_verify.c
+++ b/crypto/asn1/a_verify.c
@@ -136,8 +136,9 @@ int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *a, ASN1_BIT_STRING *signat
 
        int mdnid, pknid;
 
-       /* Convert signature OID into digest and public key OIDs */
+       EVP_MD_CTX_init(&ctx);
 
+       /* Convert signature OID into digest and public key OIDs */
        if (!OBJ_find_sigid_algs(OBJ_obj2nid(a->algorithm), &mdnid, &pknid))
                {
                ASN1err(ASN1_F_ASN1_ITEM_VERIFY,ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM);
@@ -157,7 +158,6 @@ int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *a, ASN1_BIT_STRING *signat
                goto err;
                }
 
-       EVP_MD_CTX_init(&ctx);
        if (!EVP_VerifyInit_ex(&ctx,type, NULL))
                {
                ASN1err(ASN1_F_ASN1_ITEM_VERIFY,ERR_R_EVP_LIB);