OpenCoverage

ocsp_vfy.c

Absolute File Name:

/home/opencoverage/opencoverage/guest-scripts/libressl/src/crypto/ocsp/ocsp_vfy.c

Switch to Source code

Preprocessed file

Line Source Count

1 -

2 static int ocsp_find_signer(X509 **psigner, OCSP_BASICRESP *bs, -

3 struct stack_st_X509 *certs, X509_STORE *st, unsigned long flags); -

4 static X509 *ocsp_find_signer_sk(struct stack_st_X509 *certs, OCSP_RESPID *id); -

5 static int ocsp_check_issuer(OCSP_BASICRESP *bs, struct stack_st_X509 *chain, -

6 unsigned long flags); -

7 static int ocsp_check_ids(struct stack_st_OCSP_SINGLERESP *sresp, OCSP_CERTID **ret); -

8 static int ocsp_match_issuerid(X509 *cert, OCSP_CERTID *cid, -

9 struct stack_st_OCSP_SINGLERESP *sresp); -

10 static int ocsp_check_delegated(X509 *x, int flags); -

11 static int ocsp_req_find_signer(X509 **psigner, OCSP_REQUEST *req, -

12 X509_NAME *nm, struct stack_st_X509 *certs, X509_STORE *st, -

13 unsigned long flags); -

14 -

15 -

16 int -

17 OCSP_basic_verify(OCSP_BASICRESP *bs, struct stack_st_X509 *certs, X509_STORE *st, -

18 unsigned long flags) -

19 { -

20 X509 *signer, *x; -

21 struct stack_st_X509 *chain = -

22 ((void *)0) -

23 ; -

24 struct stack_st_X509 *untrusted = -

25 ((void *)0) -

26 ; -

27 X509_STORE_CTX ctx; -

28 int i, ret = 0; -

29 -

30 ret = ocsp_find_signer(&signer, bs, certs, st, flags); -

if (!ret

!ret	Description
TRUE	never evaluated
FALSE	never evaluated

) {

32 ERR_put_error(39,(0xfff),(118),__FILE__,89); -

goto

never executed: goto end;

end;

never executed: goto end;

34 } -

if ((

(ret == 2)	Description
TRUE	never evaluated
FALSE	never evaluated

ret == 2)

(ret == 2)	Description
TRUE	never evaluated
FALSE	never evaluated

&& (

(flags & 0x200)	Description
TRUE	never evaluated
FALSE	never evaluated

flags & 0x200)

(flags & 0x200)	Description
TRUE	never evaluated
FALSE	never evaluated

)

flags |= 0x10;

never executed: flags |= 0x10;

if (!(flags & 0x4)

!(flags & 0x4)	Description
TRUE	never evaluated
FALSE	never evaluated

) {

38 EVP_PKEY *skey; -

39 -

40 skey = X509_get_pubkey(signer); -

if (skey

skey	Description
TRUE	never evaluated
FALSE	never evaluated

) {

42 ret = ASN1_item_verify(&OCSP_RESPDATA_it, bs->signatureAlgorithm,bs->signature,bs->tbsResponseData,skey); -

43 EVP_PKEY_free(skey); -

}

never executed: end of block

if (!skey

!skey	Description
TRUE	never evaluated
FALSE	never evaluated

|| ret <= 0

ret <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

46 ERR_put_error(39,(0xfff),(117),__FILE__,103); -

goto

never executed: goto end;

end;

never executed: goto end;

48 } -

}

never executed: end of block

if (!(flags & 0x10)

!(flags & 0x10)	Description
TRUE	never evaluated
FALSE	never evaluated

) {

51 int init_res; -

52 -

if (flags & 0x8

flags & 0x8	Description
TRUE	never evaluated
FALSE	never evaluated

) {

54 untrusted = -

55 ((void *)0) -

56 ; -

}

never executed: end of block

else if (bs->certs

bs->certs	Description
TRUE	never evaluated
FALSE	never evaluated

&& certs

certs	Description
TRUE	never evaluated
FALSE	never evaluated

) {

58 untrusted = (struct stack_st_X509 *)sk_dup(((_STACK*) (1 ? bs->certs : (struct stack_st_X509*)0))); -

for (i = 0; i < sk_num(((_STACK*) (1 ? (certs) : (struct stack_st_X509*)0)))

i < sk_num(((_..._st_X509*)0)))	Description
TRUE	never evaluated
FALSE	never evaluated

; i++) {

if (!sk_push(((_STACK*) (1 ? (untrusted) : (struct stack_st_X509*)0)), ((void*) (1 ? (((X509 *)sk_value(((_STACK*) (1 ? (certs) : (struct stack_st_X509*)0)), (i)))) : (X509*)0)))

!sk_push(((_ST... : (X509*)0)))	Description
TRUE	never evaluated
FALSE	never evaluated

61 ) { -

62 ERR_put_error(39,(0xfff),((1|64)),__FILE__,117); -

goto

never executed: goto end;

end;

never executed: goto end;

64 } -

}

never executed: end of block

}

never executed: end of block

else

untrusted = bs->certs;

never executed: untrusted = bs->certs;

68 init_res = X509_STORE_CTX_init(&ctx, st, signer, untrusted); -

if (!init_res

!init_res	Description
TRUE	never evaluated
FALSE	never evaluated

) {

70 ret = -1; -

71 ERR_put_error(39,(0xfff),(11),__FILE__,126); -

goto

never executed: goto end;

end;

never executed: goto end;

73 } -

74 -

if (X509_STORE_CTX_set_purpose(&ctx,

X509_STORE_CTX...(&ctx, 8) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

8) == 0

X509_STORE_CTX...(&ctx, 8) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

77 X509_STORE_CTX_cleanup(&ctx); -

78 ret = -1; -

goto

never executed: goto end;

end;

never executed: goto end;

80 } -

81 ret = X509_verify_cert(&ctx); -

82 chain = X509_STORE_CTX_get1_chain(&ctx); -

83 X509_STORE_CTX_cleanup(&ctx); -

if (ret <= 0

ret <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

85 i = X509_STORE_CTX_get_error(&ctx); -

86 ERR_put_error(39,(0xfff),(101),__FILE__,141); -

87 ERR_asprintf_error_data("Verify error:%s", -

88 X509_verify_cert_error_string(i)); -

goto

never executed: goto end;

end;

never executed: goto end;

90 } -

if (flags & 0x100

flags & 0x100	Description
TRUE	never evaluated
FALSE	never evaluated

) {

92 ret = 1; -

goto

never executed: goto end;

end;

never executed: goto end;

94 } -

95 -

96 -

97 -

98 ret = ocsp_check_issuer(bs, chain, flags); -

99 -

100 -

101

if (ret != 0

ret != 0	Description
TRUE	never evaluated
FALSE	never evaluated

)

102

goto

never executed: goto end;

end;

never executed: goto end;

103 -

104 -

105 -

106 -

107

if (flags & 0x20

flags & 0x20	Description
TRUE	never evaluated
FALSE	never evaluated

)

108

goto

never executed: goto end;

end;

never executed: goto end;

109 -

110 x = ((X509 *)sk_value(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0)), (sk_num(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0))) - 1))); -

111

if (X509_check_trust(x, 180, 0) !=

X509_check_tru..., 180, 0) != 1	Description
TRUE	never evaluated
FALSE	never evaluated

112

X509_check_tru..., 180, 0) != 1	Description
TRUE	never evaluated
FALSE	never evaluated

) {

113 ERR_put_error(39,(0xfff),(112),__FILE__,168); -

114

goto

never executed: goto end;

end;

never executed: goto end;

115 } -

116 ret = 1; -

117

}

never executed: end of block

118 -

119

end:

code before this statement never executed: end:

120

if (chain

chain	Description
TRUE	never evaluated
FALSE	never evaluated

)

121

sk_pop_free(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0)), ((void (*)(void *)) ((1 ? (X509_free) : (void (*)(X509 *))0))));

never executed:

sk_pop_free(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0)), ((void (*)(void *)) ((1 ? (X509_free) : (void (*)(X509 *))0))));

122

if (bs->certs

bs->certs	Description
TRUE	never evaluated
FALSE	never evaluated

&& certs

certs	Description
TRUE	never evaluated
FALSE	never evaluated

)

123

sk_free(((_STACK*) (1 ? (untrusted) : (struct stack_st_X509*)0)));

never executed: sk_free(((_STACK*) (1 ? (untrusted) : (struct stack_st_X509*)0)));

124

return

never executed: return ret;

ret;

never executed: return ret;

125 } -

126 -

127 static int -

128 ocsp_find_signer(X509 **psigner, OCSP_BASICRESP *bs, struct stack_st_X509 *certs, -

129 X509_STORE *st, unsigned long flags) -

130 { -

131 X509 *signer; -

132 OCSP_RESPID *rid = bs->tbsResponseData->responderId; -

133 -

134

if ((

(signer = ocsp...k(certs, rid))	Description
TRUE	never evaluated
FALSE	never evaluated

signer = ocsp_find_signer_sk(certs, rid))

(signer = ocsp...k(certs, rid))	Description
TRUE	never evaluated
FALSE	never evaluated

) {

135 *psigner = signer; -

136

return

never executed: return 2;

137 } -

138

if (!(flags & 0x2)

!(flags & 0x2)	Description
TRUE	never evaluated
FALSE	never evaluated

139

(

(signer = ocsp...->certs, rid))	Description
TRUE	never evaluated
FALSE	never evaluated

signer = ocsp_find_signer_sk(bs->certs, rid))

(signer = ocsp...->certs, rid))	Description
TRUE	never evaluated
FALSE	never evaluated

) {

140 *psigner = signer; -

141

return

never executed: return 1;

142 } -

143 -

144 -

145 *psigner = -

146 ((void *)0) -

147 ; -

148

return

never executed: return 0;

149 } -

150 -

151 static X509 * -

152 ocsp_find_signer_sk(struct stack_st_X509 *certs, OCSP_RESPID *id) -

153 { -

154 int i; -

155 unsigned char tmphash[20], *keyhash; -

156 X509 *x; -

157 -

158 -

159

if (id->type == 0

id->type == 0	Description
TRUE	never evaluated
FALSE	never evaluated

)

160

return

never executed: return X509_find_by_subject(certs, id->value.byName);

X509_find_by_subject(certs, id->value.byName);

never executed: return X509_find_by_subject(certs, id->value.byName);

161 -

162 -

163 -

164 -

165

if (id->value.byKey->length != 20

id->value.byKey->length != 20	Description
TRUE	never evaluated
FALSE	never evaluated

)

166

return

never executed: return ((void *)0) ;

167

((void *)0)

never executed: return ((void *)0) ;

168

;

never executed: return ((void *)0) ;

169 keyhash = id->value.byKey->data; -

170 -

171

for (i = 0; i < sk_num(((_STACK*) (1 ? (certs) : (struct stack_st_X509*)0)))

i < sk_num(((_..._st_X509*)0)))	Description
TRUE	never evaluated
FALSE	never evaluated

; i++) {

172 x = ((X509 *)sk_value(((_STACK*) (1 ? (certs) : (struct stack_st_X509*)0)), (i))); -

173 X509_pubkey_digest(x, EVP_sha1(), tmphash, -

174 ((void *)0) -

175 ); -

176

if (!memcmp(keyhash, tmphash, 20)

!memcmp(keyhash, tmphash, 20)	Description
TRUE	never evaluated
FALSE	never evaluated

)

177

return

never executed: return x;

178

}

never executed: end of block

179

return

never executed: return ((void *)0) ;

180

((void *)0)

never executed: return ((void *)0) ;

181

;

never executed: return ((void *)0) ;

182 } -

183 -

184 static int -

185 ocsp_check_issuer(OCSP_BASICRESP *bs, struct stack_st_X509 *chain, -

186 unsigned long flags) -

187 { -

188 struct stack_st_OCSP_SINGLERESP *sresp; -

189 X509 *signer, *sca; -

190 OCSP_CERTID *caid = -

191 ((void *)0) -

192 ; -

193 int i; -

194 -

195 sresp = bs->tbsResponseData->responses; -

196 -

197

if (sk_num(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0))) <= 0

sk_num(((_STAC...509*)0))) <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

198 ERR_put_error(39,(0xfff),(105),__FILE__,243); -

199

return

never executed: return -1;

-1;

never executed: return -1;

200 } -

201 -

202 -

203 i = ocsp_check_ids(sresp, &caid); -

204 -

205 -

206

if (i <= 0

i <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

)

207

return

never executed: return i;

208 -

209 signer = ((X509 *)sk_value(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0)), (0))); -

210 -

211

if (sk_num(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0))) > 1

sk_num(((_STAC...X509*)0))) > 1	Description
TRUE	never evaluated
FALSE	never evaluated

) {

212 sca = ((X509 *)sk_value(((_STACK*) (1 ? (chain) : (struct stack_st_X509*)0)), (1))); -

213 i = ocsp_match_issuerid(sca, caid, sresp); -

214

if (i < 0

i < 0	Description
TRUE	never evaluated
FALSE	never evaluated

)

215

return

never executed: return i;

216

if (i

i	Description
TRUE	never evaluated
FALSE	never evaluated

) {

217 -

218

if (ocsp_check_delegated(signer, flags)

ocsp_check_del...signer, flags)	Description
TRUE	never evaluated
FALSE	never evaluated

)

219

return

never executed: return 1;

220

return

never executed: return 0;

221 } -

222

}

never executed: end of block

223 -

224 -

225

return

never executed: return ocsp_match_issuerid(signer, caid, sresp);

ocsp_match_issuerid(signer, caid, sresp);

never executed: return ocsp_match_issuerid(signer, caid, sresp);

226 } -

227 -

228 -

229 -

230 -

231 -

232 static int -

233 ocsp_check_ids(struct stack_st_OCSP_SINGLERESP *sresp, OCSP_CERTID **ret) -

234 { -

235 OCSP_CERTID *tmpid, *cid; -

236 int i, idcount; -

237 -

238 idcount = sk_num(((_STACK*) (1 ? (sresp) : (struct stack_st_OCSP_SINGLERESP*)0))); -

239

if (idcount <= 0

idcount <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

240 ERR_put_error(39,(0xfff),(111),__FILE__,285); -

241

return

never executed: return -1;

-1;

never executed: return -1;

242 } -

243 -

244 cid = ((OCSP_SINGLERESP *)sk_value(((_STACK*) (1 ? (sresp) : (struct stack_st_OCSP_SINGLERESP*)0)), (0)))->certId; -

245 -

246 *ret = -

247 ((void *)0) -

248 ; -

249 -

250

for (i = 1; i < idcount

i < idcount	Description
TRUE	never evaluated
FALSE	never evaluated

; i++) {

251 tmpid = ((OCSP_SINGLERESP *)sk_value(((_STACK*) (1 ? (sresp) : (struct stack_st_OCSP_SINGLERESP*)0)), (i)))->certId; -

252 -

253

if (OCSP_id_issuer_cmp(cid, tmpid)

OCSP_id_issuer_cmp(cid, tmpid)	Description
TRUE	never evaluated
FALSE	never evaluated

) {

254

return

never executed: return 0;

255 } -

256

}

never executed: end of block

257 -

258 -

259 *ret = cid; -

260

return

never executed: return 1;

261 } -

262 -

263 static int -

264 ocsp_match_issuerid(X509 *cert, OCSP_CERTID *cid, -

265 struct stack_st_OCSP_SINGLERESP *sresp) -

266 { -

267 -

268

if (cid

cid	Description
TRUE	never evaluated
FALSE	never evaluated

) {

269 const EVP_MD *dgst; -

270 X509_NAME *iname; -

271 int mdlen; -

272 unsigned char md[64]; -

273 -

274

if (!(dgst =

!(dgst = EVP_g...>algorithm))))	Description
TRUE	never evaluated
FALSE	never evaluated

275

EVP_get_digestbyname(OBJ_nid2sn(OBJ_obj2nid(cid->hashAlgorithm->algorithm))))

!(dgst = EVP_g...>algorithm))))	Description
TRUE	never evaluated
FALSE	never evaluated

) {

276 ERR_put_error(39,(0xfff),(119),__FILE__,319); -

277

return

never executed: return -1;

-1;

never executed: return -1;

278 } -

279 -

280 mdlen = EVP_MD_size(dgst); -

281

if (mdlen < 0

mdlen < 0	Description
TRUE	never evaluated
FALSE	never evaluated

)

282

return

never executed: return -1;

-1;

never executed: return -1;

283

if (cid->issuerNameHash->length != mdlen

cid->issuerNam...ength != mdlen	Description
TRUE	never evaluated
FALSE	never evaluated

284

cid->issuerKeyHash->length != mdlen

cid->issuerKey...ength != mdlen	Description
TRUE	never evaluated
FALSE	never evaluated

)

285

return

never executed: return 0;

286 iname = X509_get_subject_name(cert); -

287

if (!X509_NAME_digest(iname, dgst, md,

!X509_NAME_dig... ((void *)0) )	Description
TRUE	never evaluated
FALSE	never evaluated

288

((void *)0)

!X509_NAME_dig... ((void *)0) )	Description
TRUE	never evaluated
FALSE	never evaluated

289

)

!X509_NAME_dig... ((void *)0) )	Description
TRUE	never evaluated
FALSE	never evaluated

)

290

return

never executed: return -1;

-1;

never executed: return -1;

291

if (memcmp(md, cid->issuerNameHash->data, mdlen)

memcmp(md, cid...->data, mdlen)	Description
TRUE	never evaluated
FALSE	never evaluated

)

292

return

never executed: return 0;

293 X509_pubkey_digest(cert, dgst, md, -

294 ((void *)0) -

295 ); -

296

if (memcmp(md, cid->issuerKeyHash->data, mdlen)

memcmp(md, cid...->data, mdlen)	Description
TRUE	never evaluated
FALSE	never evaluated

)

297

return

never executed: return 0;

298 -

299

return

never executed: return 1;

300 } else { -

301 -

302 int i, ret; -

303 OCSP_CERTID *tmpid; -

304 -

305

for (i = 0; i < sk_num(((_STACK*) (1 ? (sresp) : (struct stack_st_OCSP_SINGLERESP*)0)))

i < sk_num(((_...NGLERESP*)0)))	Description
TRUE	never evaluated
FALSE	never evaluated

; i++) {

306 tmpid = ((OCSP_SINGLERESP *)sk_value(((_STACK*) (1 ? (sresp) : (struct stack_st_OCSP_SINGLERESP*)0)), (i)))->certId; -

307 ret = ocsp_match_issuerid(cert, tmpid, -

308 ((void *)0) -

309 ); -

310

if (ret <= 0

ret <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

)

311

return

never executed: return ret;

ret;

never executed: return ret;

312

}

never executed: end of block

313

return

never executed: return 1;

314 } -

315 } -

316 -

317 static int -

318 ocsp_check_delegated(X509 *x, int flags) -

319 { -

320 X509_check_purpose(x, -1, 0); -

321

if ((

(x->ex_flags & 0x0004)	Description
TRUE	never evaluated
FALSE	never evaluated

x->ex_flags & 0x0004)

(x->ex_flags & 0x0004)	Description
TRUE	never evaluated
FALSE	never evaluated

&& (

(x->ex_xkusage & 0x20)	Description
TRUE	never evaluated
FALSE	never evaluated

x->ex_xkusage & 0x20)

(x->ex_xkusage & 0x20)	Description
TRUE	never evaluated
FALSE	never evaluated

)

322

return

never executed: return 1;

323 ERR_put_error(39,(0xfff),(103),__FILE__,360); -

324

return

never executed: return 0;

325 } -

326 -

327 -

328 -

329 -

330 -

331 int -

332 OCSP_request_verify(OCSP_REQUEST *req, struct stack_st_X509 *certs, X509_STORE *store, -

333 unsigned long flags) -

334 { -

335 X509 *signer; -

336 X509_NAME *nm; -

337 GENERAL_NAME *gen; -

338 int ret; -

339 X509_STORE_CTX ctx; -

340 -

341

if (!req->optionalSignature

!req->optionalSignature	Description
TRUE	never evaluated
FALSE	never evaluated

) {

342 ERR_put_error(39,(0xfff),(128),__FILE__,379); -

343

return

never executed: return 0;

344 } -

345 gen = req->tbsRequest->requestorName; -

346

if (!gen

!gen	Description
TRUE	never evaluated
FALSE	never evaluated

|| gen->type != 4

gen->type != 4	Description
TRUE	never evaluated
FALSE	never evaluated

) {

347 ERR_put_error(39,(0xfff),(129),__FILE__,384); -

348

return

never executed: return 0;

349 } -

350 nm = gen->d.directoryName; -

351 ret = ocsp_req_find_signer(&signer, req, nm, certs, store, flags); -

352

if (ret <= 0

ret <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

353 ERR_put_error(39,(0xfff),(118),__FILE__,390); -

354

return

never executed: return 0;

355 } -

356

if ((

(ret == 2)	Description
TRUE	never evaluated
FALSE	never evaluated

ret == 2)

(ret == 2)	Description
TRUE	never evaluated
FALSE	never evaluated

&& (

(flags & 0x200)	Description
TRUE	never evaluated
FALSE	never evaluated

flags & 0x200)

(flags & 0x200)	Description
TRUE	never evaluated
FALSE	never evaluated

)

357

flags |= 0x10;

never executed: flags |= 0x10;

358

if (!(flags & 0x4)

!(flags & 0x4)	Description
TRUE	never evaluated
FALSE	never evaluated

) {

359 EVP_PKEY *skey; -

360 -

361 skey = X509_get_pubkey(signer); -

362 ret = ASN1_item_verify(&OCSP_REQINFO_it, req->optionalSignature->signatureAlgorithm, req->optionalSignature->signature,req->tbsRequest,skey); -

363 EVP_PKEY_free(skey); -

364

if (ret <= 0

ret <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

365 ERR_put_error(39,(0xfff),(117),__FILE__,402); -

366

return

never executed: return 0;

367 } -

368

}

never executed: end of block

369

if (!(flags & 0x10)

!(flags & 0x10)	Description
TRUE	never evaluated
FALSE	never evaluated

) {

370 int init_res; -

371 -

372

if (flags & 0x8

flags & 0x8	Description
TRUE	never evaluated
FALSE	never evaluated

)

373

init_res = X509_STORE_CTX_init(&ctx, store, signer,

never executed: init_res = X509_STORE_CTX_init(&ctx, store, signer, ((void *)0) );

374

never executed: init_res = X509_STORE_CTX_init(&ctx, store, signer, ((void *)0) );

375

((void *)0)

never executed: init_res = X509_STORE_CTX_init(&ctx, store, signer, ((void *)0) );

376

);

never executed: init_res = X509_STORE_CTX_init(&ctx, store, signer, ((void *)0) );

377 else -

378

init_res = X509_STORE_CTX_init(&ctx, store, signer,

never executed: init_res = X509_STORE_CTX_init(&ctx, store, signer, req->optionalSignature->certs);

379

req->optionalSignature->certs);

never executed: init_res = X509_STORE_CTX_init(&ctx, store, signer, req->optionalSignature->certs);

380

if (!init_res

!init_res	Description
TRUE	never evaluated
FALSE	never evaluated

) {

381 ERR_put_error(39,(0xfff),(11),__FILE__,416); -

382

return

never executed: return 0;

383 } -

384 -

385

if (X509_STORE_CTX_set_purpose(&ctx,

X509_STORE_CTX...(&ctx, 8) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

386

8) == 0

X509_STORE_CTX...(&ctx, 8) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

387

X509_STORE_CTX_set_trust(&ctx,

X509_STORE_CTX...(&ctx, 7) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

388

7) == 0

X509_STORE_CTX...(&ctx, 7) == 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

389 X509_STORE_CTX_cleanup(&ctx); -

390

return

never executed: return 0;

391 } -

392 ret = X509_verify_cert(&ctx); -

393 X509_STORE_CTX_cleanup(&ctx); -

394

if (ret <= 0

ret <= 0	Description
TRUE	never evaluated
FALSE	never evaluated

) {

395 ret = X509_STORE_CTX_get_error(&ctx); -

396 ERR_put_error(39,(0xfff),(101),__FILE__,431); -

397 ERR_asprintf_error_data("Verify error:%s", -

398 X509_verify_cert_error_string(ret)); -

399

return

never executed: return 0;

400 } -

401

}

never executed: end of block

402

return

never executed: return 1;

403 } -

404 -

405 static int -

406 ocsp_req_find_signer(X509 **psigner, OCSP_REQUEST *req, X509_NAME *nm, -

407 struct stack_st_X509 *certs, X509_STORE *st, unsigned long flags) -

408 { -

409 X509 *signer; -

410 -

411

if (!(flags & 0x2)

!(flags & 0x2)	Description
TRUE	never evaluated
FALSE	never evaluated

) {

412 signer = X509_find_by_subject(req->optionalSignature->certs, nm); -

413

if (signer

signer	Description
TRUE	never evaluated
FALSE	never evaluated

) {

414 *psigner = signer; -

415

return

never executed: return 1;

416 } -

417

}

never executed: end of block

418 -

419 signer = X509_find_by_subject(certs, nm); -

420

if (signer

signer	Description
TRUE	never evaluated
FALSE	never evaluated

) {

421 *psigner = signer; -

422

return

never executed: return 2;

423 } -

424

return

never executed: return 0;

425 } -

Switch to Source code

Preprocessed file

Generated by Squish Coco 4.2.2