doc updates

diff --git a/NEWS b/NEWS
index 71466897afa7202f397c41693f56eda0b7e547f8..e929d78bd105807d1ace316c19e8858fe4de430c 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -31,7 +31,7 @@ key usage violation errors (they are far too common to ignore).
 
 ** libgnutls: Added GNUTLS_STATELESS_COMPRESSION flag to gnutls_init(),
 which provides a tool to counter compression-related attacks where
-parts of the data are controlled by the attacker _and_ placed in
+parts of the data are controlled by the attacker _and_ are placed in
 separate records (use with care - do not use compression if not sure).
 
 ** libgnutls: Depends on libtasn1 2.14 or later.

diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c
index 36bf149ebe7e4a27deeb46f89fc044bf7c7b8799..369e79e71e6a3a6722c6e41ab90767ccd130e153 100644 (file)
--- a/lib/x509/verify-high.c
+++ b/lib/x509/verify-high.c
@@ -406,8 +406,10 @@ static int shorten_clist(gnutls_x509_trust_list_t list,
 
 /* Takes a certificate list and orders it with subject, issuer order.
  *
- * Returns the size of the ordered list (which is always less or
+ * *clist_size contains the size of the ordered list (which is always less or
  * equal to the original).
+ *
+ * Returns the sorted list which may be the original clist.
  */
 static gnutls_x509_crt_t* sort_clist(gnutls_x509_crt_t sorted[DEFAULT_MAX_VERIFY_DEPTH], 
                                      gnutls_x509_crt_t * clist,