changeset 4090:9d50f1cc093f

6549186 OpenSSL_FindCert incorrectly tracks matched certificates
author wyllys
date Mon, 23 Apr 2007 17:39:53 -0700
parents 32330c723688
children dba66edc4d9d
files usr/src/lib/libkmf/plugins/kmf_openssl/common/openssl_spi.c
diffstat 1 files changed, 5 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/usr/src/lib/libkmf/plugins/kmf_openssl/common/openssl_spi.c	Mon Apr 23 17:22:33 2007 -0700
+++ b/usr/src/lib/libkmf/plugins/kmf_openssl/common/openssl_spi.c	Mon Apr 23 17:39:53 2007 -0700
@@ -1051,7 +1051,7 @@
 			/* If load succeeds, add certdata to the list */
 			if (kmf_cert != NULL) {
 				for (i = 0; i < loaded_certs &&
-				    i < maxcerts; i++) {
+				    n < maxcerts; i++) {
 					kmf_cert[n].certificate.Data =
 						certlist[i].Data;
 					kmf_cert[n].certificate.Length =
@@ -1065,7 +1065,10 @@
 						strdup(fname);
 					n++;
 				}
-				/* If maxcerts < loaded_certs, clean up */
+				/*
+				 * If maxcerts < loaded_certs, clean up the
+				 * certs that were not used.
+				 */
 				for (; i < loaded_certs; i++)
 					KMF_FreeData(&certlist[i]);
 			} else {