cryptnet: Fail CRL verification if there's no issuer certificate.

bbb3990c · Hans Leidekker · Alexandre Julliard · c57eda24 · bbb3990c
Commit bbb3990c authored Jun 15, 2022 by Hans Leidekker Committed by Alexandre Julliard Jun 15, 2022
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

cryptnet_main.c dlls/cryptnet/cryptnet_main.c +6 -0

No files found.
--- a/dlls/cryptnet/cryptnet_main.c
+++ b/dlls/cryptnet/cryptnet_main.c
@@ -1690,6 +1690,12 @@ static DWORD verify_cert_revocation_from_dist_points_ext(const CRYPT_DATA_BLOB *
    const CRL_CONTEXT *crl;
    DWORD timeout = 0;

+    if (!params || !params->pIssuerCert)
+    {
+        TRACE("no issuer certificate\n");
+        return CRYPT_E_REVOCATION_OFFLINE;
+    }
+
    if (!CRYPT_GetUrlFromCRLDistPointsExt(value, NULL, &url_array_size, NULL, NULL))
        return GetLastError();