Need to check <= 0 here.

d11d977d · Dr. Stephen Henson · 4a1b71fb · d11d977d
显示空白变更内容
内联并排

Showing with 1 addition and 1 deletion

crypto/x509/x509_vfy.c crypto/x509/x509_vfy.c +1 -1

未找到文件。
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -1387,7 +1387,7 @@ static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)

 			if (!(ctx->current_crl_score & CRL_SCORE_SAME_PATH))
 				{
-				if (!check_crl_path(ctx, ctx->current_issuer))
+				if (check_crl_path(ctx, ctx->current_issuer) <= 0)
 					{
 					ctx->error = X509_V_ERR_CRL_PATH_VALIDATION_ERROR;
 					ok = ctx->verify_cb(0, ctx);