Refactor find_parent() to merge two call sites

This commit is contained in:
Manuel Pégourié-Gonnard 2017-08-14 16:11:43 +02:00
parent a4a5d1dbe6
commit 18547b5db6

View file

@ -2051,35 +2051,39 @@ static int x509_crt_find_parent(
mbedtls_x509_crt_restart_ctx *rs_ctx ) mbedtls_x509_crt_restart_ctx *rs_ctx )
{ {
int ret; int ret;
mbedtls_x509_crt *search_list;
/* Look for a parent in trusted CAs */
*parent_is_trusted = 1; *parent_is_trusted = 1;
ret = x509_crt_find_parent_in( child, trust_ca,
parent, signature_is_good, while( 1 ) {
1, path_cnt, self_cnt, rs_ctx ); search_list = *parent_is_trusted ? trust_ca : child->next;
ret = x509_crt_find_parent_in( child, search_list,
parent, signature_is_good,
*parent_is_trusted,
path_cnt, self_cnt, rs_ctx );
#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE)
if( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ) { if( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ) {
// TODO: stave state // TODO: stave state
return( ret ); return( ret );
} }
#endif /* MBEDTLS_ECDSA_C && MBEDTLS_ECP_RESTARTABLE */ #endif /* MBEDTLS_ECDSA_C && MBEDTLS_ECP_RESTARTABLE */
if( *parent != NULL ) /* stop here if found or already in second iteration */
return( 0 ); if( *parent != NULL || *parent_is_trusted == 0 )
break;
/* Look for a parent upwards the chain */ /* prepare second iteration */
*parent_is_trusted = 0; *parent_is_trusted = 0;
ret = x509_crt_find_parent_in( child, child->next, }
parent, signature_is_good,
0, path_cnt, self_cnt, rs_ctx ); /* extra precaution against mistakes in the caller */
if( parent == NULL )
#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) {
if( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ) { parent_is_trusted = 0;
// TODO: stave state signature_is_good = 0;
return( ret );
} }
#endif /* MBEDTLS_ECDSA_C && MBEDTLS_ECP_RESTARTABLE */
return( 0 ); return( 0 );
} }