crypt32: Remove an unnecessary if.
This commit is contained in:
parent
8585203103
commit
f8044948ba
|
@ -778,9 +778,6 @@ static void CRYPT_CheckNameConstraints(
|
|||
const CERT_NAME_CONSTRAINTS_INFO *nameConstraints, const CERT_INFO *cert,
|
||||
DWORD *trustErrorStatus)
|
||||
{
|
||||
/* If there aren't any existing constraints, don't bother checking */
|
||||
if (nameConstraints->cPermittedSubtree || nameConstraints->cExcludedSubtree)
|
||||
{
|
||||
CERT_EXTENSION *ext = get_subject_alt_name_ext(cert);
|
||||
|
||||
if (ext)
|
||||
|
@ -798,8 +795,7 @@ static void CRYPT_CheckNameConstraints(
|
|||
for (i = 0; i < nameConstraints->cExcludedSubtree; i++)
|
||||
CRYPT_FindMatchingNameEntry(
|
||||
&nameConstraints->rgExcludedSubtree[i].Base, subjectName,
|
||||
trustErrorStatus,
|
||||
CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT, 0);
|
||||
trustErrorStatus, CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT, 0);
|
||||
for (i = 0; i < nameConstraints->cPermittedSubtree; i++)
|
||||
CRYPT_FindMatchingNameEntry(
|
||||
&nameConstraints->rgPermittedSubtree[i].Base, subjectName,
|
||||
|
@ -809,8 +805,7 @@ static void CRYPT_CheckNameConstraints(
|
|||
}
|
||||
else
|
||||
*trustErrorStatus |=
|
||||
CERT_TRUST_INVALID_EXTENSION |
|
||||
CERT_TRUST_INVALID_NAME_CONSTRAINTS;
|
||||
CERT_TRUST_INVALID_EXTENSION | CERT_TRUST_INVALID_NAME_CONSTRAINTS;
|
||||
}
|
||||
else
|
||||
{
|
||||
|
@ -819,9 +814,7 @@ static void CRYPT_CheckNameConstraints(
|
|||
CERT_TRUST_HAS_NOT_DEFINED_NAME_CONSTRAINT |
|
||||
CERT_TRUST_HAS_NOT_PERMITTED_NAME_CONSTRAINT;
|
||||
if (nameConstraints->cExcludedSubtree)
|
||||
*trustErrorStatus |=
|
||||
CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT;
|
||||
}
|
||||
*trustErrorStatus |= CERT_TRUST_HAS_EXCLUDED_NAME_CONSTRAINT;
|
||||
}
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue