From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 15 Apr 2009 15:07:09 +0000 (+0000)
Subject: PR: 1899
X-Git-Tag: OpenSSL_1_0_0-beta2~10
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=268e78c30528f04738009e809389af523939893d;p=oweals%2Fopenssl.git

PR: 1899
Submitted by: Ger Hobbelt <ger@hobbelt.com>
Approved by: steve@openssl.org

Check for <= 0 when verifying CRL issuers.
---

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index f662124d76..9ff66cff13 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1124,7 +1124,7 @@ static int check_crl_path(X509_STORE_CTX *ctx, X509 *x)
 	/* Verify CRL issuer */
 	ret = X509_verify_cert(&crl_ctx);
 
-	if (!ret)
+	if (ret <= 0)
 		goto err;
 
 	/* Check chain is acceptable */