merklecounty / rget

download URLs and verify the contents against a publicly recorded cryptographic log
https://merklecounty.com
Apache License 2.0
205 stars 17 forks source link

rgetct: add missing return statement #27

Open leonklingele opened 5 years ago

leonklingele commented 5 years ago

Without it, "ct.MerkleTreeLeafForEmbeddedSCT" might get called with a "nil" issuer, resulting in a nil pointer dereference. See https://github.com/google/certificate-transparency-go/blob/cb150c95c86291443da938a5973c249ed1458e87/serialization.go#L221.

leonklingele commented 5 years ago

Please note that this change is untested.