commit 7c6d4a4e6bf35b523cf379259194a4be809830ea
author Paul Bakker <p.j.bakker@polarssl.org> Sat Mar 28 20:35:47 2009 +0000
committer Paul Bakker <p.j.bakker@polarssl.org> Sat Mar 28 20:35:47 2009 +0000
tree 93d82e8bae3586e17848029df85992601db9bc9f
parent e9581d66b0baafbd2699fea658e7466dd201d8b7

 - Fixed new logic on certificate chains in x509parse_verify()

library/x509parse.c

diff --git a/library/x509parse.c b/library/x509parse.c
index 919be65..7d88a0c 100644
--- a/library/x509parse.c
+++ b/library/x509parse.c
@@ -1584,7 +1584,7 @@
 
     pathlen = 1;
 
-    while( cur->version != 0 )
+    while( cur != NULL && cur->version != 0 )
     {
         if( cur->ca_istrue == 0 ||
             crt->issuer_raw.len != cur->subject_raw.len ||
@@ -1612,7 +1612,7 @@
     /*
      * Atempt to validate topmost cert with our CA chain.
      */
-    while( trust_ca->version != 0 )
+    while( trust_ca != NULL && trust_ca->version != 0 )
     {
         if( crt->issuer_raw.len != trust_ca->subject_raw.len ||
             memcmp( crt->issuer_raw.p, trust_ca->subject_raw.p,