Is this expected? (plen > (x->ex_pathlen + proxy_path_length + 1)) evaluates to false (constraint not violated) when checking constraint 0 against plen=1 (constraint violated as far as I can understand?). Doesn't make much sense to me. Is there something I haven't understood about how the constraint is supposed to work? ******* important variables ******* *** check_chain_extensions:523 i=0 *** check_chain_extensions:524 plen=0 *** check_chain_extensions:525 x->ex_pathlen=-1 ******* if statement components ******* *** check_chain_extensions:527 i > 1=0 *** check_chain_extensions:528 !(x->ex_flags & EXFLAG_SI)=0 *** check_chain_extensions:529 (x->ex_pathlen != -1)=0 *** check_chain_extensions:530 (plen > (x->ex_pathlen + proxy_path_length + 1))=0 ******* important variables ******* *** check_chain_extensions:523 i=1 *** check_chain_extensions:524 plen=0 *** check_chain_extensions:525 x->ex_pathlen=-1 ******* if statement components ******* *** check_chain_extensions:527 i > 1=0 *** check_chain_extensions:528 !(x->ex_flags & EXFLAG_SI)=1 *** check_chain_extensions:529 (x->ex_pathlen != -1)=0 *** check_chain_extensions:530 (plen > (x->ex_pathlen + proxy_path_length + 1))=0 ******* important variables ******* *** check_chain_extensions:523 i=2 *** check_chain_extensions:524 plen=1 *** check_chain_extensions:525 x->ex_pathlen=0 ******* if statement components ******* *** check_chain_extensions:527 i > 1=1 *** check_chain_extensions:528 !(x->ex_flags & EXFLAG_SI)=1 *** check_chain_extensions:529 (x->ex_pathlen != -1)=1 *** check_chain_extensions:530 (plen > (x->ex_pathlen + proxy_path_length + 1))=0 ******* important variables ******* *** check_chain_extensions:523 i=3 *** check_chain_extensions:524 plen=2 *** check_chain_extensions:525 x->ex_pathlen=1 ******* if statement components ******* *** check_chain_extensions:527 i > 1=1 *** check_chain_extensions:528 !(x->ex_flags & EXFLAG_SI)=0 *** check_chain_extensions:529 (x->ex_pathlen != -1)=1 *** check_chain_extensions:530 (plen > (x->ex_pathlen + proxy_path_length + 1))=0 -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
