From 865f3df35b102585dba79862a5c26c99529d13d9 Mon Sep 17 00:00:00 2001
From: Juan Lang <juan.lang@gmail.com>
Date: Mon, 9 Nov 2009 16:35:43 -0800
Subject: [PATCH] crypt32: Check the issued certificate for name constraint
 violations, not the issuing certificate.

---
 dlls/crypt32/chain.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/crypt32/chain.c b/dlls/crypt32/chain.c
index 26627e27d66..c93e1481c29 100644
--- a/dlls/crypt32/chain.c
+++ b/dlls/crypt32/chain.c
@@ -801,7 +801,7 @@ static void CRYPT_CheckChainNameConstraints(PCERT_SIMPLE_CHAIN chain)
                      chain->rgpElement[j]->pCertContext))
                     {
                         CRYPT_CheckNameConstraints(nameConstraints,
-                         chain->rgpElement[i]->pCertContext->pCertInfo,
+                         chain->rgpElement[j]->pCertContext->pCertInfo,
                          &errorStatus);
                         chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
                          errorStatus;