From be6771810fe86f8b4af03334e3246167587bfa86 Mon Sep 17 00:00:00 2001 From: Nikos Mavrogiannopoulos Date: Mon, 8 Sep 2014 10:46:39 +0200 Subject: initialize verification output to zero --- lib/x509/verify-high.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c index dd2e2b479b..f870e2d08c 100644 --- a/lib/x509/verify-high.c +++ b/lib/x509/verify-high.c @@ -779,6 +779,7 @@ gnutls_x509_trust_list_verify_crt(gnutls_x509_trust_list_t list, ret = check_if_in_blacklist(cert_list, cert_list_size, list->blacklisted, list->blacklisted_size); if (ret != 0) { + *voutput = 0; *voutput |= GNUTLS_CERT_REVOKED; *voutput |= GNUTLS_CERT_INVALID; return 0; @@ -904,6 +905,7 @@ gnutls_x509_trust_list_verify_named_crt(gnutls_x509_trust_list_t list, unsigned int i; uint32_t hash; + hash = hash_pjw_bare(cert->raw_issuer_dn.data, cert->raw_issuer_dn.size); @@ -912,6 +914,7 @@ gnutls_x509_trust_list_verify_named_crt(gnutls_x509_trust_list_t list, ret = check_if_in_blacklist(&cert, 1, list->blacklisted, list->blacklisted_size); if (ret != 0) { + *voutput = 0; *voutput |= GNUTLS_CERT_REVOKED; *voutput |= GNUTLS_CERT_INVALID; return 0; -- cgit v1.2.1