From 42e10c3fd6129ba6e875716312387b0fa12f0c0f Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 29 Nov 2012 19:16:01 +0000 Subject: PR: 2803 Submitted by: jean-etienne.schwartz@bull.net In OCSP_basic_varify return an error if X509_STORE_CTX_init fails. --- crypto/ocsp/ocsp_vfy.c | 1 + 1 file changed, 1 insertion(+) (limited to 'crypto/ocsp/ocsp_vfy.c') diff --git a/crypto/ocsp/ocsp_vfy.c b/crypto/ocsp/ocsp_vfy.c index 4a0c3870d8..d3b446c5f9 100644 --- a/crypto/ocsp/ocsp_vfy.c +++ b/crypto/ocsp/ocsp_vfy.c @@ -108,6 +108,7 @@ int OCSP_basic_verify(OCSP_BASICRESP *bs, STACK_OF(X509) *certs, init_res = X509_STORE_CTX_init(&ctx, st, signer, bs->certs); if(!init_res) { + ret = -1; OCSPerr(OCSP_F_OCSP_BASIC_VERIFY,ERR_R_X509_LIB); goto end; } -- cgit v1.2.3