openssl
diff --git a/‎crypto/x509/x509_vfy.c‎
Lines changed: 2 additions & 0 deletions b/‎crypto/x509/x509_vfy.c‎
Lines changed: 2 additions & 0 deletions
@@ -1241,6 +1241,8 @@ static int check_delta_base(X509_CRL *delta, X509_CRL *base)
  if (ASN1_INTEGER_cmp(delta->base_crl_number, base->crl_number) > 0)
  return 0;
  /* Delta CRL number must exceed full CRL number */
+ if (delta->crl_number == NULL)
+ return 0;
  return ASN1_INTEGER_cmp(delta->crl_number, base->crl_number) > 0;
 }
Original file line number	Diff line number	Diff line change
`@@ -1241,6 +1241,8 @@ static int check_delta_base(X509_CRL delta, X509_CRL base)`
`1241`	`1241`	`if (ASN1_INTEGER_cmp(delta->base_crl_number, base->crl_number) > 0)`
`1242`	`1242`	`return 0;`
`1243`	`1243`	`/* Delta CRL number must exceed full CRL number */`
	`1244`	`+ if (delta->crl_number == NULL)`
	`1245`	`+ return 0;`
`1244`	`1246`	`return ASN1_INTEGER_cmp(delta->crl_number, base->crl_number) > 0;`
`1245`	`1247`	`}`
`1246`	`1248`