X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/822b670c6f91d089ccb51b77e24b6ac80406b337..07691282a056c4efea71e1e505527601e8cc166b:/OSX/libsecurity_apple_x509_tp/lib/TPCrlInfo.cpp

diff --git a/OSX/libsecurity_apple_x509_tp/lib/TPCrlInfo.cpp b/OSX/libsecurity_apple_x509_tp/lib/TPCrlInfo.cpp
index 54a5a249..5b1ca87f 100644
--- a/OSX/libsecurity_apple_x509_tp/lib/TPCrlInfo.cpp
+++ b/OSX/libsecurity_apple_x509_tp/lib/TPCrlInfo.cpp
@@ -32,6 +32,7 @@
 #include <Security/oidscert.h>
 #include <Security/oidscrl.h>
 #include <security_cdsa_utilities/cssmerrors.h>
+#include <utilities/SecCFRelease.h>
 #include <string.h>						/* for memcmp */
 #include <Security/cssmapple.h>
 
@@ -291,6 +292,7 @@ CSSM_RETURN TPCrlInfo::parseExtensions(
                                                "CE_CDNT_NameRelativeToCrlIssuer not implemented\n");
                                     break;
                                 }
+#if 0
                                 /* relativeName is a RDN sequence */
                                 CSSM_X509_RDN_PTR idpName = idp->distPointName->dpn.rdn;
                                 CSSM_X509_RDN_PTR certName = dp->distPointName->dpn.rdn;
@@ -311,6 +313,7 @@ CSSM_RETURN TPCrlInfo::parseExtensions(
                                     /* All the pairs matched. */
                                     found = CSSM_TRUE;
                                 }
+#endif
                             }
                             case CE_CDNT_FullName: {
                                 /* fullName is a GeneralNames sequence */
@@ -691,15 +694,13 @@ CSSM_RETURN TPCrlInfo::isCertRevoked(
 	}
 
 	subjectCert.freeField(&CSSMOID_X509V1SerialNumber, subjSerial);
+
+    CFReleaseNull(cfRevokedTime);
+    CFReleaseNull(cfVerifyTime);
+
 	if(crtn && !subjectCert.addStatusCode(crtn)) {
 		return CSSM_OK;
 	}
-	if(cfRevokedTime) {
-		CFRelease(cfRevokedTime);
-	}
-	if(cfVerifyTime) {
-		CFRelease(cfVerifyTime);
-	}
 	return crtn;
 }