[EMAIL PROTECTED] - Fri May 16 12:54:13 2003]:

> Hi All,
> 
> The X509_TRUST_OBJECT_SIGN, which is defined in crypto/x509/x509.h, is
not
> included in the trstandard table defined in crypto/x509/x509_trs.c.
The
> number of trust options and the number of entries and their order in
this
> table should match (maybe this should be pointed out in a comment in
> x509.h).

Correct.

> This may cause a segmentation fault if somebody calls
> X509_TRUST_get0(X509_TRUST_OCSP_REQUEST) and uses the return value.
Probably
> nobody does.

That's incorrect use of X509_TRUST_get0().  Proper use is
X509_TRUST_get0(X509_TRUST_get_by_id(X509_TRUST_OCSP_REQUEST)). 
However, that doesn't change the correctness of your claim above.

-- 
Richard Levitte
[EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to