1. Fix build break issue for NOOPT target.

[mirror_edk2.git] / CryptoPkg / Library / BaseCryptLib / Pk / CryptX509.c

diff --git a/CryptoPkg/Library/BaseCryptLib/Pk/CryptX509.c b/CryptoPkg/Library/BaseCryptLib/Pk/CryptX509.c
index 7557399aa4e7a6a0e7ca4c9572c951522af68aab..88c21369b6de0d5481bfbf0300cd167c1a9ffcfe 100644 (file)
--- a/CryptoPkg/Library/BaseCryptLib/Pk/CryptX509.c
+++ b/CryptoPkg/Library/BaseCryptLib/Pk/CryptX509.c
@@ -48,6 +48,10 @@ X509ConstructCertificate (
   ASSERT (Cert != NULL);\r
   ASSERT (SingleX509Cert != NULL);\r
 \r
+  if (CertSize > INT_MAX) {\r
+    return FALSE;\r
+  }\r
+\r
   Status = FALSE;\r
 \r
   //\r
@@ -439,6 +443,7 @@ X509VerifyCert (
   // X509 Certificate Verification.\r
   //\r
   Status = (BOOLEAN) X509_verify_cert (&CertCtx);\r
+  X509_STORE_CTX_cleanup (&CertCtx);\r
 \r
 _Exit:\r
   //\r
@@ -447,7 +452,6 @@ _Exit:
   X509_free (X509Cert);\r
   X509_free (X509CACert);\r
   X509_STORE_free (CertStore);\r
-  X509_STORE_CTX_cleanup (&CertCtx);\r
 \r
   return Status;\r
 }\r