Files
codeql/cpp/ql/src/Security/CWE/CWE-295/SSLResultConflationBad.cpp
2021-11-24 18:25:56 +00:00

14 lines
246 B
C++

// ...
if (cert = SSL_get_peer_certificate(ssl))
{
result = SSL_get_verify_result(ssl);
if ((result == X509_V_OK) || (result == X509_V_ERR_CERT_HAS_EXPIRED)) // BAD (conflates OK and a non-OK codes)
{
do_ok();
} else {
do_error();
}
}