Avoid reusing i.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21152 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -572,10 +572,10 @@ hx509_revoke_verify(hx509_context context,
|
||||
continue;
|
||||
}
|
||||
|
||||
for (i = 0; i < ocsp->ocsp.tbsResponseData.responses.len; i++) {
|
||||
for (j = 0; j < ocsp->ocsp.tbsResponseData.responses.len; j++) {
|
||||
heim_octet_string os;
|
||||
|
||||
ret = der_heim_integer_cmp(&ocsp->ocsp.tbsResponseData.responses.val[i].certID.serialNumber,
|
||||
ret = der_heim_integer_cmp(&ocsp->ocsp.tbsResponseData.responses.val[j].certID.serialNumber,
|
||||
&c->tbsCertificate.serialNumber);
|
||||
if (ret != 0)
|
||||
continue;
|
||||
@@ -594,13 +594,13 @@ hx509_revoke_verify(hx509_context context,
|
||||
|
||||
ret = _hx509_verify_signature(context,
|
||||
NULL,
|
||||
&ocsp->ocsp.tbsResponseData.responses.val[i].certID.hashAlgorithm,
|
||||
&ocsp->ocsp.tbsResponseData.responses.val[j].certID.hashAlgorithm,
|
||||
&os,
|
||||
&ocsp->ocsp.tbsResponseData.responses.val[i].certID.issuerKeyHash);
|
||||
&ocsp->ocsp.tbsResponseData.responses.val[j].certID.issuerKeyHash);
|
||||
if (ret != 0)
|
||||
continue;
|
||||
|
||||
switch (ocsp->ocsp.tbsResponseData.responses.val[i].certStatus.element) {
|
||||
switch (ocsp->ocsp.tbsResponseData.responses.val[j].certStatus.element) {
|
||||
case choice_OCSPCertStatus_good:
|
||||
break;
|
||||
case choice_OCSPCertStatus_revoked:
|
||||
@@ -609,13 +609,13 @@ hx509_revoke_verify(hx509_context context,
|
||||
}
|
||||
|
||||
/* don't allow the update to be in the future */
|
||||
if (ocsp->ocsp.tbsResponseData.responses.val[i].thisUpdate >
|
||||
if (ocsp->ocsp.tbsResponseData.responses.val[j].thisUpdate >
|
||||
now + context->ocsp_time_diff)
|
||||
continue;
|
||||
|
||||
/* don't allow the next updte to be in the past */
|
||||
if (ocsp->ocsp.tbsResponseData.responses.val[i].nextUpdate) {
|
||||
if (*ocsp->ocsp.tbsResponseData.responses.val[i].nextUpdate < now)
|
||||
if (ocsp->ocsp.tbsResponseData.responses.val[j].nextUpdate) {
|
||||
if (*ocsp->ocsp.tbsResponseData.responses.val[j].nextUpdate < now)
|
||||
continue;
|
||||
} else
|
||||
/* Should force a refetch, but can we ? */;
|
||||
|
Reference in New Issue
Block a user