From: Nikos Mavrogiannopoulos <nmav@crystal.(none)>
Date: Sun, 15 Feb 2009 17:51:12 +0000 (+0200)
Subject: Corrected bit disable (was flipping instead).
X-Git-Tag: gnutls_2_7_6~24
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c8dcbedd1fdc312f5b1a70fcfbc1afe235d800cd;p=thirdparty%2Fgnutls.git

Corrected bit disable (was flipping instead).
Initialy reported by Daniel Kahn Gillmor on 9/1/2008. Many thanks to
moog@sysdev.oucs.ox.ac.uk for bringing this into my attention.
---

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index af97f4b0a3..4b1252e85d 100644
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -504,7 +504,7 @@ _gnutls_x509_verify_certificate (const gnutls_x509_crt_t * certificate_list,
        * certificates can exist in a supplied chain.
        */
       if (!(flags & GNUTLS_VERIFY_ALLOW_ANY_X509_V1_CA_CRT))
-	flags ^= GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT;
+	flags &= ~(GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT);
       if ((ret =
 	   _gnutls_verify_certificate2 (certificate_list[i - 1],
 					&certificate_list[i], 1, flags,