We can't check policy if we got an empty stack of certs

beldmit · Aug 14, 2024 · e4a1a35 · e4a1a35
1 parent 12ba471
commit e4a1a35
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/crypto/x509/pcy_tree.c b/crypto/x509/pcy_tree.c
@@ -110,6 +110,8 @@ static int tree_init(X509_POLICY_TREE **ptree, STACK_OF(X509) *certs,
 
     *ptree = NULL;
 
+    if (n < 0)
+        return X509_PCY_TREE_INTERNAL;
     /* Can't do anything with just a trust anchor */
     if (n == 0)
         return X509_PCY_TREE_EMPTY;