Am 15.04.14 20:00, schrieb Stephen Henson via RT:
> The cause was that the lastpost parameter was set to 0 instead of -1. The
> purpose of lastpos is to find multiple extensions of the same time so you can
> continue from the last found position or -1 to start from the beginning.
> Erroneously setting it to 0 will mean it misses the extension if it is first.

Thanks for identifying the cause.

> I've just added a fix (and to two other cases in the same file). Let me know 
> of
> any problems.

I've applied your suggested fix locally (replaced 0 with -1 in the calls 
to X509_get_ext_by_NID()), and I can confirm that it corrects the problem.

In what OpenSSL version(s) will this fix be included? Will it be 
included in OpenSSL 1.0.2? I could not yet see it in the public Git 
repository.

Thanks
Stephan


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to