Error on setting an invalid CSR version

Reported by David Benjamin (BoringSSL)

OK tb@

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libcrypto/x509/x509rset.c b/src/lib/libcrypto/x509/x509rset.c
index f097a379fb..9154e33845 100644
--- a/src/lib/libcrypto/x509/x509rset.c
+++ b/src/lib/libcrypto/x509/x509rset.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509rset.c,v 1.12 2023/02/16 08:38:17 tb Exp $ */
+/* $OpenBSD: x509rset.c,v 1.13 2024/03/25 11:27:00 job Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -68,7 +68,7 @@
 int
 X509_REQ_set_version(X509_REQ *x, long version)
 {
-        if (x == NULL)
+        if (x == NULL || version != 0)
                 return (0);
         x->req_info->enc.modified = 1;
         return (ASN1_INTEGER_set(x->req_info->version, version));