crypt32: Check the issued certificate for name constraint violations, not the issuing certificate.

865f3df3 · Juan Lang · Alexandre Julliard · ef6ce9a5 · 865f3df3
Commit 865f3df3 authored Nov 09, 2009 by Juan Lang Committed by Alexandre Julliard Nov 10, 2009
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

chain.c dlls/crypt32/chain.c +1 -1

No files found.
--- a/dlls/crypt32/chain.c
+++ b/dlls/crypt32/chain.c
@@ -801,7 +801,7 @@ static void CRYPT_CheckChainNameConstraints(PCERT_SIMPLE_CHAIN chain)
                     chain->rgpElement[j]->pCertContext))
                    {
                        CRYPT_CheckNameConstraints(nameConstraints,
-                         chain->rgpElement[i]->pCertContext->pCertInfo,
+                         chain->rgpElement[j]->pCertContext->pCertInfo,
                         &errorStatus);
                        chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
                         errorStatus;