summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/x509/x509_addr.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libcrypto/x509/x509_addr.c')
-rw-r--r--src/lib/libcrypto/x509/x509_addr.c13
1 files changed, 4 insertions, 9 deletions
diff --git a/src/lib/libcrypto/x509/x509_addr.c b/src/lib/libcrypto/x509/x509_addr.c
index 7a35b21332..0781ce37a9 100644
--- a/src/lib/libcrypto/x509/x509_addr.c
+++ b/src/lib/libcrypto/x509/x509_addr.c
@@ -1063,8 +1063,7 @@ int X509v3_addr_canonize(IPAddrBlocks *addr)
1063 } 1063 }
1064 (void)sk_IPAddressFamily_set_cmp_func(addr, IPAddressFamily_cmp); 1064 (void)sk_IPAddressFamily_set_cmp_func(addr, IPAddressFamily_cmp);
1065 sk_IPAddressFamily_sort(addr); 1065 sk_IPAddressFamily_sort(addr);
1066 if (!OPENSSL_assert(X509v3_addr_is_canonical(addr))) 1066 OPENSSL_assert(X509v3_addr_is_canonical(addr));
1067 return 0;
1068 return 1; 1067 return 1;
1069} 1068}
1070 1069
@@ -1362,13 +1361,9 @@ static int addr_validate_path_internal(X509_STORE_CTX *ctx,
1362 int i, j, ret = 1; 1361 int i, j, ret = 1;
1363 X509 *x; 1362 X509 *x;
1364 1363
1365 if (!OPENSSL_assert(chain != NULL && sk_X509_num(chain) > 0) 1364 OPENSSL_assert(chain != NULL && sk_X509_num(chain) > 0);
1366 || !OPENSSL_assert(ctx != NULL || ext != NULL) 1365 OPENSSL_assert(ctx != NULL || ext != NULL);
1367 || !OPENSSL_assert(ctx == NULL || ctx->verify_cb != NULL)) { 1366 OPENSSL_assert(ctx == NULL || ctx->verify_cb != NULL);
1368 if (ctx != NULL)
1369 ctx->error = X509_V_ERR_UNSPECIFIED;
1370 return 0;
1371 }
1372 1367
1373 /* 1368 /*
1374 * Figure out where to start. If we don't have an extension to 1369 * Figure out where to start. If we don't have an extension to