From ee80662e66559fc3b02eeb63e205318939efdc30 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Thu, 24 Aug 2006 20:02:06 +0000 Subject: Anything covers a null resource set svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=224 --- openssl/trunk/crypto/x509v3/v3_addr.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'openssl/trunk/crypto/x509v3/v3_addr.c') diff --git a/openssl/trunk/crypto/x509v3/v3_addr.c b/openssl/trunk/crypto/x509v3/v3_addr.c index ee87fa25..ee1ea53b 100644 --- a/openssl/trunk/crypto/x509v3/v3_addr.c +++ b/openssl/trunk/crypto/x509v3/v3_addr.c @@ -1174,12 +1174,15 @@ int v3_addr_validate_path(X509_STORE_CTX *ctx) } /* - * RFC 3779 2.3 path validation of a "resource set" + * RFC 3779 2.3 path validation of a "resource set". + * Test whether chain covers resource_set. */ int v3_addr_validate_resource_set(STACK_OF(X509) *chain, IPAddrBlocks *resource_set) { - if (chain == NULL || resource_set == NULL) + if (resource_set == NULL) + return 1; + if (chain == NULL) return 0; return v3_addr_validate_path_internal(NULL, chain, resource_set); } -- cgit v1.2.3