diff options
| author | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-08-29 23:37:48 +0000 |
|---|---|---|
| committer | agl@chromium.org <agl@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-08-29 23:37:48 +0000 |
| commit | be0fff6dceca7a2c6d7ec18275e5d4f766e97059 (patch) | |
| tree | e672d7f16188577534fac53fc3650cf7b9c593f7 /net/cert | |
| parent | f332efa097c118d5aaa7fef1f045c61bc9b0ef93 (diff) | |
| download | chromium_src-be0fff6dceca7a2c6d7ec18275e5d4f766e97059.zip chromium_src-be0fff6dceca7a2c6d7ec18275e5d4f766e97059.tar.gz chromium_src-be0fff6dceca7a2c6d7ec18275e5d4f766e97059.tar.bz2 | |
net: test that cert is marked as revoked if EV revocation check receives revoked response (Win).
If we do an online revocation check because a certificate is EV and we don't
have CRLSet coverage then we would like to mark the certificate as revoked
if the check indicates that, rather than just removing the EV badge.
However, on non-Windows platforms we don't get enough information from the
verification so this change just adds a test for Windows.
This also fixes a small memory leak.
BUG=279282
Review URL: https://chromiumcodereview.appspot.com/23441005
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@220429 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'net/cert')
| -rw-r--r-- | net/cert/cert_verify_proc_win.cc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/cert/cert_verify_proc_win.cc b/net/cert/cert_verify_proc_win.cc index d3e8b62..b64797a 100644 --- a/net/cert/cert_verify_proc_win.cc +++ b/net/cert/cert_verify_proc_win.cc @@ -647,6 +647,7 @@ int CertVerifyProcWin::VerifyInternal( chain_flags &= ~CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY; verify_result->cert_status |= CERT_STATUS_REV_CHECKING_ENABLED; + CertFreeCertificateChain(chain_context); if (!CertGetCertificateChain( chain_engine, cert_list.get(), |