647711 - CERT_PKIXVerifyCert, bug in: if (defaultPkixVerifyParamsIn)

Status: NEW

(NSS :: Libraries, defect, P5)

Description

[Kai Engert [:KaiE:]]

Function CERT_PKIXVerifyCert has a for loop that processes global defaults.
The loop inside has a bug:

2271                for (j=0; paramsIn[i].type != cert_pi_end; ++j) {
2272                    if (defaultPkixVerifyParamsIn[i].type == paramsIn[i].type) {
2273                        skip_default_param = PR_TRUE;
2274                        break;
2275                    }
2276                }


Note that "j" is never used inside the loop.

Comment 1

[:Cykesiopka]

Since I spent a few minutes being confused by this...

The for loop in question is part of the patch in Bug 481763, which AFAICT, has yet to land as of the posting of this comment.