[PATCH 1/3] cryptnet: Fail CRL verification if there's no issuer certificate.

[Hans Leidekker]

From: Hans Leidekker <hans at codeweavers.com>

---
 dlls/cryptnet/cryptnet_main.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/dlls/cryptnet/cryptnet_main.c b/dlls/cryptnet/cryptnet_main.c
index ac282f5aa82..b066821a431 100644
--- a/dlls/cryptnet/cryptnet_main.c
+++ b/dlls/cryptnet/cryptnet_main.c
@@ -1690,6 +1690,12 @@ static DWORD verify_cert_revocation_from_dist_points_ext(const CRYPT_DATA_BLOB *
     const CRL_CONTEXT *crl;
     DWORD timeout = 0;
 
+    if (!params || !params->pIssuerCert)
+    {
+        TRACE("no issuer certificate\n");
+        return CRYPT_E_REVOCATION_OFFLINE;
+    }
+
     if (!CRYPT_GetUrlFromCRLDistPointsExt(value, NULL, &url_array_size, NULL, NULL))
         return GetLastError();
 
-- 
GitLab


https://gitlab.winehq.org/wine/wine/-/merge_requests/251