Commit b2aa38a9 authored by Rich Salz's avatar Rich Salz
Browse files

RT2560: missing NULL check in ocsp_req_find_signer 



If we don't find a signer in the internal list, then fall
through and look at the internal list; don't just return NULL.

Reviewed-by: default avatarDr. Stephen Henson <steve@openssl.org>
parent 468ab1c2

crypto/ocsp/ocsp_vfy.c

+5 −2
Original line number Diff line number Diff line
@@ -436,9 +436,12 @@ static int ocsp_req_find_signer(X509 **psigner, OCSP_REQUEST *req, X509_NAME *nm 
	if(!(flags & OCSP_NOINTERN))

		{

		signer = X509_find_by_subject(req->optionalSignature->certs, nm);

		if (signer)

			{

			*psigner = signer;

			return 1;

			}

		}



	signer = X509_find_by_subject(certs, nm);

	if (signer)