Juan Lang : crypt32: Check the issued certificate for name constraint violations, not the issuing certificate.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 865f3df35b102585dba79862a5c26c99529d13d9
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=865f3df35b102585dba79862a5...

Author: Juan Lang 
Date:   Mon Nov  9 16:35:43 2009 -0800

crypt32: Check the issued certificate for name constraint violations, not the issuing certificate.

---

dlls/crypt32/chain.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/crypt32/chain.c b/dlls/crypt32/chain.c
index 26627e2..c93e148 100644
--- a/dlls/crypt32/chain.c
+++ b/dlls/crypt32/chain.c
@@ -801,7 +801,7 @@ static void CRYPT_CheckChainNameConstraints(PCERT_SIMPLE_CHAIN chain)
                      chain->rgpElement[j]->pCertContext))
                     {
                         CRYPT_CheckNameConstraints(nameConstraints,
-                         chain->rgpElement[i]->pCertContext->pCertInfo,
+                         chain->rgpElement[j]->pCertContext->pCertInfo,
                          &errorStatus);
                         chain->rgpElement[i]->TrustStatus.dwErrorStatus |=
                          errorStatus;