this version of unbound fails when compiled with CC=clang and -O (edit Makefile)...

git-svn-id: file:///svn/unbound/trunk@4425 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/validator/val_sigcrypt.c b/validator/val_sigcrypt.c
index 099e658a3d2b2746efd778dfe0d3d9a654787206..dc946c96b5fe01245166d755eded52c954558517 100644 (file)
--- a/validator/val_sigcrypt.c
+++ b/validator/val_sigcrypt.c
@@ -1211,6 +1211,7 @@ check_dates(struct val_env* ve, uint32_t unow,
 {
        /* read out the dates */
        int32_t expi, incep, now;
+       int32_t incepminexpi;
        memmove(&expi, expi_p, sizeof(expi));
        memmove(&incep, incep_p, sizeof(incep));
        expi = ntohl(expi);
@@ -1227,7 +1228,9 @@ check_dates(struct val_env* ve, uint32_t unow,
        } else  now = (int32_t)unow;
 
        /* check them */
-       if(incep - expi > 0) {
+       incepminexpi = incep-expi;
+       if(incepminexpi > 0) {
+               log_info("incep-expi failure");
                sigdate_error("verify: inception after expiration, "
                        "signature bad", expi, incep, now);
                *reason = "signature inception after expiration";