Commit 4b8747e4 authored by Ben Laurie's avatar Ben Laurie
Browse files

Die if serial number is invalid.

parent 2ff7a0ed

apps/ocsp.c

+1 −0
Original line number Diff line number Diff line
@@ -1146,6 +1146,7 @@ static char **lookup_serial(CA_DB *db, ASN1_INTEGER *ser) 
	char *itmp, *row[DB_NUMBER],**rrow;

	for (i = 0; i < DB_NUMBER; i++) row[i] = NULL;

	bn = ASN1_INTEGER_to_BN(ser,NULL);

	OPENSSL_assert(bn); /* FIXME: should report an error at this point and abort */

	if (BN_is_zero(bn))

		itmp = BUF_strdup("00");

	else