F-8197: normalize X509_STORE_add_cert failure codes to negative

2026-08-13 15:58:17 -06:00 · 2026-08-13 15:58:17 -06:00 · 672a73a831
parent 166993e265
commit 672a73a831
1 changed files with 4 additions and 0 deletions
--- a/jni/jni_wolfssl_x509_store_ctx.c
+++ b/jni/jni_wolfssl_x509_store_ctx.c
@ -287,6 +287,10 @@ JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_WolfSSLX509StoreCtx_wolfSSL_1X
    if (ret != WOLFSSL_SUCCESS) {
        LogStr("wolfSSL_X509_STORE_add_cert() failed: %d\n", ret);
        wolfSSL_X509_free(x509);
+        /* Normalize to negative so Java does not read failure as success */
+        if (ret >= 0) {
+            ret = BAD_STATE_E;
+        }
        return ret;
    }
    ret = 0;