Commit dfefe7ec authored by Matt Caswell's avatar Matt Caswell
Browse files

Fix a missing return value check in v3_addr 



All other instances of extract_min_max are checked for an error return,
except this one.

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent bcc31778

crypto/x509v3/v3_addr.c

+2 −1
Original line number Diff line number Diff line
@@ -897,7 +897,8 @@ static int IPAddressOrRanges_canonize(IPAddressOrRanges *aors, 
        IPAddressOrRange *a = sk_IPAddressOrRange_value(aors, j);

        if (a != NULL && a->type == IPAddressOrRange_addressRange) {

            unsigned char a_min[ADDR_RAW_BUF_LEN], a_max[ADDR_RAW_BUF_LEN];

            extract_min_max(a, a_min, a_max, length);

            if (!extract_min_max(a, a_min, a_max, length))

                return 0;

            if (memcmp(a_min, a_max, length) > 0)

                return 0;

        }