CheckCertCRL_ex: check cbRet after callback

julek-wolfssl · julek-wolfssl · commit 8a57ca84c35c · 2026-03-10T09:52:05.000+01:00
F-432
diff --git a/src/crl.c b/src/crl.c
@@ -591,7 +591,7 @@ int CheckCertCRL_ex(WOLFSSL_CRL* crl, byte* issuerHash, byte* serial,
             if (cbRet == WC_NO_ERR_TRACE(WOLFSSL_CBIO_ERR_WANT_READ)) {
                 ret = OCSP_WANT_READ;
             }
-            else if (ret >= 0) {
+            else if (cbRet >= 0) {
                 /* try again */
                 ret = CheckCertCRLList(crl, issuerHash, serial, serialSz,
                         serialHash, &foundEntry);

Original file line number	Diff line number	Diff line change
`@@ -591,7 +591,7 @@ int CheckCertCRL_ex(WOLFSSL_CRL* crl, byte* issuerHash, byte* serial,`
`591`	`591`	`if (cbRet == WC_NO_ERR_TRACE(WOLFSSL_CBIO_ERR_WANT_READ)) {`
`592`	`592`	`ret = OCSP_WANT_READ;`
`593`	`593`	`}`
`594`		`- else if (ret >= 0) {`
	`594`	`+ else if (cbRet >= 0) {`
`595`	`595`	`/* try again */`
`596`	`596`	`ret = CheckCertCRLList(crl, issuerHash, serial, serialSz,`
`597`	`597`	`serialHash, &foundEntry);`