]> git.ipfire.org Git - thirdparty/openssl.git/commit
Ensure X509_STORE_CTX_purpose_inherit handles a 0 default purpose
authorMatt Caswell <matt@openssl.org>
Thu, 30 Dec 2021 16:37:06 +0000 (16:37 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 27 Jan 2022 15:29:54 +0000 (15:29 +0000)
commit4aa82850267defd772ddf74a88d515ef4fb566b8
tree59f6a33e3aa8f306c8fe7615ef25cdbfb7e1a1e3
parent2ce0a3d19005271e7e3c351b562d9da93e2d4c80
Ensure X509_STORE_CTX_purpose_inherit handles a 0 default purpose

The function X509_STORE_CTX_purpose_inherit() can be called with a 0
default purpose. If the main purpose was set to X509_PURPOSE_ANY this
would case the function to incorrectly return an error response.

Fixes #17367

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/17382)
crypto/x509/x509_vfy.c