Continue loop if no match found; avoids an OOB write. ok florian@ tb@

diff --git a/usr.sbin/acme-client/revokeproc.c b/usr.sbin/acme-client/revokeproc.c
index 3eb0bd4..fee2d56 100644 (file)
--- a/usr.sbin/acme-client/revokeproc.c
+++ b/usr.sbin/acme-client/revokeproc.c
@@ -1,4 +1,4 @@
-/*     $Id: revokeproc.c,v 1.19 2021/11/22 08:26:08 tb Exp $ */
+/*     $Id: revokeproc.c,v 1.20 2022/12/14 15:44:13 otto Exp $ */
 /*
  * Copyright (c) 2016 Kristaps Dzonsons <kristaps@bsd.lv>
  *
@@ -239,6 +239,7 @@ revokeproc(int fd, const char *certfile, int force,
                                goto out;
                        }
                        force = 2;
+                       continue;
                }
                if (found[j]++) {
                        if (revocate) {