Check X509Certificate::CreateFromHandle result.

net/cert/cert_verify_proc_win.cc

Index: net/cert/cert_verify_proc_win.cc
diff --git a/net/cert/cert_verify_proc_win.cc b/net/cert/cert_verify_proc_win.cc
index ef334da0ae464bfa88bfdd804d702aa02b06e2c3..e9866d44974be4ede0ac43b76cce8c9cc73963ed 100644
--- a/net/cert/cert_verify_proc_win.cc
+++ b/net/cert/cert_verify_proc_win.cc
@@ -329,10 +329,10 @@ bool IsIssuedByKnownRoot(PCCERT_CHAIN_CONTEXT chain_context) {
 // Saves some information about the certificate chain |chain_context| in
 // |*verify_result|. The caller MUST initialize |*verify_result| before
 // calling this function.
-void GetCertChainInfo(PCCERT_CHAIN_CONTEXT chain_context,
+bool GetCertChainInfo(PCCERT_CHAIN_CONTEXT chain_context,
                       CertVerifyResult* verify_result) {
   if (chain_context->cChain == 0)
-    return;
+    return true;
 
   PCERT_SIMPLE_CHAIN first_chain = chain_context->rgpChain[0];
   DWORD num_elements = first_chain->cElement;
@@ -371,7 +371,9 @@ void GetCertChainInfo(PCCERT_CHAIN_CONTEXT chain_context,
       verified_chain.push_back(element[num_elements]->pCertContext);
     verify_result->verified_cert =
           X509Certificate::CreateFromHandle(verified_cert, verified_chain);
+    return !!verify_result->verified_cert;
   }
+  return true;
 }
 
 // Decodes the cert's certificatePolicies extension into a CERT_POLICIES_INFO
@@ -1114,7 +1116,8 @@ int CertVerifyProcWin::VerifyInternal(
   }
 
   CertVerifyResult temp_verify_result = *verify_result;
-  GetCertChainInfo(chain_context, verify_result);
+  if (!GetCertChainInfo(chain_context, verify_result))
+    return ERR_CERT_INVALID;
   if (!verify_result->is_issued_by_known_root &&
       (flags & CertVerifier::VERIFY_REV_CHECKING_REQUIRED_LOCAL_ANCHORS)) {
     *verify_result = temp_verify_result;
@@ -1136,7 +1139,8 @@ int CertVerifyProcWin::VerifyInternal(
       verify_result->cert_status |= CERT_STATUS_INVALID;
       return MapSecurityError(GetLastError());
     }
-    GetCertChainInfo(chain_context, verify_result);
+    if (!GetCertChainInfo(chain_context, verify_result))
+      return ERR_CERT_INVALID;
 
     if (chain_context->TrustStatus.dwErrorStatus &
         CERT_TRUST_IS_OFFLINE_REVOCATION) {