x509: fix double locking problem
This reverts commit 9aa4be691f5c73eb3c68606d824c104550c053f7 and removed the redundant flag setting. Fixes #19643 Fixes LOW CVE-2022-3996 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/19652)
This commit is contained in:
parent
6c73ca4a2f
commit
4d0340a6d2
@ -73,10 +73,6 @@ int ossl_policy_cache_set_mapping(X509 *x, POLICY_MAPPINGS *maps)
|
||||
|
||||
ret = 1;
|
||||
bad_mapping:
|
||||
if (ret == -1 && CRYPTO_THREAD_write_lock(x->lock)) {
|
||||
x->ex_flags |= EXFLAG_INVALID_POLICY;
|
||||
CRYPTO_THREAD_unlock(x->lock);
|
||||
}
|
||||
sk_POLICY_MAPPING_pop_free(maps, POLICY_MAPPING_free);
|
||||
return ret;
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user