CVSROOT:        /cvs
Module name:    src
Changes by:     t...@cvs.openbsd.org    2024/03/28 22:50:11

Modified files:
        lib/libcrypto/x509: x509_vpm.c 

Log message:
Make X509_VERIFY_PARAM_set1_policies() less bad

If any OBJ_dup() fails along the way, a partially copied policy stack
would remain on the params object. This makes no sense. Implement and
use an sk_ASN1_OBJECT_deep_copy(), that copies the full stack or else
returns NULL.

Remove unnecessary NULL check and streamline some other logic.

ok jsing

Reply via email to