crypt32: Include name constraints errors in the chain's error status.

3c8a04f1 · Juan Lang · Alexandre Julliard · f9ad32f0 · 3c8a04f1
Commit 3c8a04f1 authored Nov 13, 2009 by Juan Lang Committed by Alexandre Julliard Nov 17, 2009
Show whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

chain.c dlls/crypt32/chain.c +4 -0

No files found.
--- a/dlls/crypt32/chain.c
+++ b/dlls/crypt32/chain.c
@@ -816,8 +816,12 @@ static void CRYPT_CheckChainNameConstraints(PCERT_SIMPLE_CHAIN chain)
                         chain->rgpElement[j]->pCertContext->pCertInfo,
                         &errorStatus);
                        if (errorStatus)
+                        {
                            chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
                             errorStatus;
+                            CRYPT_CombineTrustStatus(&chain->TrustStatus,
+                             &chain->rgpElement[i]->TrustStatus);
+                        }
                        else
                            chain->rgpElement[i]->TrustStatus.dwInfoStatus |=
                             CERT_TRUST_HAS_VALID_NAME_CONSTRAINTS;