From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Thu, 27 Nov 2014 15:28:10 +0000 (+0100)
Subject: gnutls_pcert_import_x509_list: only sort the lists it can sort
X-Git-Tag: gnutls_3_4_0~550
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d66ee8253d30005ec9950221ab5afda51186bd78;p=thirdparty%2Fgnutls.git

gnutls_pcert_import_x509_list: only sort the lists it can sort
---

diff --git a/lib/gnutls_pcert.c b/lib/gnutls_pcert.c
index 0ce2989831..580bb48bdc 100644
--- a/lib/gnutls_pcert.c
+++ b/lib/gnutls_pcert.c
@@ -112,7 +112,7 @@ int gnutls_pcert_import_x509_list(gnutls_pcert_st * pcert,
 	gnutls_x509_crt_t *s;
 
 	s = crt;
-	if (flags & GNUTLS_X509_CRT_LIST_SORT && *ncrt > 1) {
+	if (flags & GNUTLS_X509_CRT_LIST_SORT && *ncrt > 1 && *ncrt < DEFAULT_MAX_VERIFY_DEPTH) {
 		s = _gnutls_sort_clist(sorted, crt, ncrt, NULL);
 		if (s == crt) {
 			gnutls_assert();