commit 13f5f768bc4861bff58074717fc19764ee347ac9
author Damien Miller <djm@mindrot.org> Fri Jan 18 15:32:03 2013 +1100
committer Damien Miller <djm@mindrot.org> Fri Jan 18 15:32:03 2013 +1100
tree 2d0a4afa3d8843cd1b417388139fc8cb59992fa4
parent ebafebda8570b2b013327cdc6627f9c5fb9733c1

   - djm@cvs.openbsd.org 2013/01/18 03:00:32
     [krl.c]
     fix KRL generation bug for list sections

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index a45d24b..6be8cd4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -8,10 +8,12 @@
      a single bit of incremental cost to revoke a certificate by serial number.
      KRLs are loaded via the existing RevokedKeys sshd_config option.
      feedback and ok markus@
- - OpenBSD CVS Sync
    - djm@cvs.openbsd.org 2013/01/18 00:45:29
      [regress/Makefile regress/cert-userkey.sh regress/krl.sh]
      Tests for Key Revocation Lists (KRLs)
+   - djm@cvs.openbsd.org 2013/01/18 03:00:32
+     [krl.c]
+     fix KRL generation bug for list sections
 
 20130117
  - (djm) [regress/cipher-speed.sh regress/integrity.sh regress/try-ciphers.sh]

krl.c

diff --git a/krl.c b/krl.c
index 4850570..ca2010a 100644
--- a/krl.c
+++ b/krl.c
@@ -14,7 +14,7 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $OpenBSD: krl.c,v 1.2 2013/01/18 00:24:58 djm Exp $ */
+/* $OpenBSD: krl.c,v 1.3 2013/01/18 03:00:32 djm Exp $ */
 
 #include "includes.h"
 
@@ -595,7 +595,7 @@
 		/* Perform section-specific processing */
 		switch (state) {
 		case KRL_SECTION_CERT_SERIAL_LIST:
-			for (i = rs->lo; i < contig; i++)
+			for (i = 0; i < contig; i++)
 				buffer_put_int64(&sect, rs->lo + i);
 			break;
 		case KRL_SECTION_CERT_SERIAL_RANGE: