)]}'
{
  "commit": "0c8bc4653e34892dc291b48fb38e180ce92b5921",
  "tree": "a86b87c3febde9f2e498c0dad45b193d6973b443",
  "parents": [
    "d62bd8ebd7f0e5eab1eb03197fd042094f7d0f45"
  ],
  "author": {
    "name": "David Benjamin",
    "email": "davidben@google.com",
    "time": "Mon Dec 25 22:52:22 2023 -0500"
  },
  "committer": {
    "name": "Boringssl LUCI CQ",
    "email": "boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Wed Jan 10 22:47:16 2024 +0000"
  },
  "message": "Remove all -1 returns from X509_check_purpose\n\nOf external callers of this function, almost all are not actually doing\nanything with this operation and are just trying to trigger\nx509v3_cache_extensions. Triggering that is no longer necessarily now\nthat the structure is opaque and accessors do it for you.\n\nThere were three callers that wanted the actual operation here. One of\nthem correctly handled the tri-state return, but did not distinguish 0\nfrom -1. The other two did not and would misinterpret -1 as success! So\nthis change is actually more compatible with OpenSSL callers than\nOpenSSL\u0027s actual behavior.\n\nChange-Id: Ifedba52dd9d4e031fc919276fd08ec22cfd33bf2\nReviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/65153\nCommit-Queue: David Benjamin \u003cdavidben@google.com\u003e\nReviewed-by: Bob Beck \u003cbbe@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7ef3d378f34ec04d0ddb1c91e42bed79ca1c3b73",
      "old_mode": 33188,
      "old_path": "crypto/x509/v3_purp.c",
      "new_id": "a38259265fd024a775cd4088fe90a042d66af60f",
      "new_mode": 33188,
      "new_path": "crypto/x509/v3_purp.c"
    }
  ]
}