From: Ben Laurie <ben@openssl.org>
Date: Wed, 4 Apr 2007 13:41:33 +0000 (+0000)
Subject: Die if serial number is invalid.
X-Git-Tag: OpenSSL_0_9_8k^2~917
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=4b8747e44043c7f429e60eea2ba03ed2a1755463;p=oweals%2Fopenssl.git

Die if serial number is invalid.
---

diff --git a/apps/ocsp.c b/apps/ocsp.c
index 6ae5fd11dd..6b7e85de36 100644
--- a/apps/ocsp.c
+++ b/apps/ocsp.c
@@ -1146,6 +1146,7 @@ static char **lookup_serial(CA_DB *db, ASN1_INTEGER *ser)
 	char *itmp, *row[DB_NUMBER],**rrow;
 	for (i = 0; i < DB_NUMBER; i++) row[i] = NULL;
 	bn = ASN1_INTEGER_to_BN(ser,NULL);
+	OPENSSL_assert(bn); /* FIXME: should report an error at this point and abort */
 	if (BN_is_zero(bn))
 		itmp = BUF_strdup("00");
 	else