*WIP* Mac Unittest for client cert selection with intermediate certs

net/cert/cert_verify_proc_mac.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/cert/cert_verify_proc_mac.h"
 
 #include <CommonCrypto/CommonDigest.h>
 #include <CoreServices/CoreServices.h>
 #include <Security/Security.h>
 
@@ skipping 732 matching lines @@
   for (bool try_reordered_keychain : {false, true}) {
     ScopedCFTypeRef<CFArrayRef> scoped_alternate_keychain_search_list;
     if (TestKeychainSearchList::HasInstance()) {
       // Unit tests need to be able to hermetically simulate situations where a
       // user has an undesirable certificate in a per-user keychain.
       // Adding/Removing a Keychain using SecKeychainCreate/SecKeychainDelete
       // has global side effects, which would break other tests and processes
       // running on the same machine, so instead tests may load pre-created
       // keychains using SecKeychainOpen and then inject them through
       // TestKeychainSearchList.
-      CFArrayRef keychain_search_list;
       status = TestKeychainSearchList::GetInstance()->CopySearchList(
-          &keychain_search_list);
+          &scoped_alternate_keychain_search_list);
       if (status)
         return NetErrorFromOSStatus(status);
-      scoped_alternate_keychain_search_list.reset(keychain_search_list);
     }
     if (try_reordered_keychain) {
       // If a TestKeychainSearchList is present, it will have already set
       // |scoped_alternate_keychain_search_list|, which will be used as the
       // basis for reordering the keychain. Otherwise, get the current keychain
       // search list and use that.
       if (!scoped_alternate_keychain_search_list) {
         CFArrayRef keychain_search_list;
         status = SecKeychainCopySearchList(&keychain_search_list);
         if (status)
@@ skipping 333 matching lines @@
     // EV cert and it was covered by CRLSets or revocation checking passed.
     verify_result->cert_status |= CERT_STATUS_IS_EV;
   }
 
   return OK;
 }
 
 }  // namespace net
 
 #pragma clang diagnostic pop  // "-Wdeprecated-declarations"