554 	struct sshbuf *sect;  in revoked_certs_generate()  local
557 	if ((sect = sshbuf_new()) == NULL)  in revoked_certs_generate()
601 				if ((r = put_bitmap(sect, bitmap)) != 0)  in revoked_certs_generate()
608 			    (r = sshbuf_put_stringb(buf, sect)) != 0)  in revoked_certs_generate()
610 			sshbuf_reset(sect);  in revoked_certs_generate()
618 			sshbuf_reset(sect);  in revoked_certs_generate()
629 				if ((r = sshbuf_put_u64(sect,  in revoked_certs_generate()
640 				if ((r = sshbuf_put_u64(sect, rs->lo + i)) != 0)  in revoked_certs_generate()
645 			if ((r = sshbuf_put_u64(sect, rs->lo)) != 0 ||  in revoked_certs_generate()
646 			    (r = sshbuf_put_u64(sect, rs->hi)) != 0)  in revoked_certs_generate()
674 			if ((r = put_bitmap(sect, bitmap)) != 0)  in revoked_certs_generate()
681 		    (r = sshbuf_put_stringb(buf, sect)) != 0)  in revoked_certs_generate()
687 	sshbuf_reset(sect);  in revoked_certs_generate()
690 		if ((r = sshbuf_put_cstring(sect, rki->key_id)) != 0)  in revoked_certs_generate()
693 	if (sshbuf_len(sect) != 0) {  in revoked_certs_generate()
695 		    (r = sshbuf_put_stringb(buf, sect)) != 0)  in revoked_certs_generate()
701 	sshbuf_free(sect);  in revoked_certs_generate()
712 	struct sshbuf *sect;  in ssh_krl_to_blob()  local
719 	if ((sect = sshbuf_new()) == NULL)  in ssh_krl_to_blob()
734 		sshbuf_reset(sect);  in ssh_krl_to_blob()
735 		if ((r = revoked_certs_generate(rc, sect)) != 0)  in ssh_krl_to_blob()
738 		    (r = sshbuf_put_stringb(buf, sect)) != 0)  in ssh_krl_to_blob()
743 	sshbuf_reset(sect);  in ssh_krl_to_blob()
746 		if ((r = sshbuf_put_string(sect, rb->blob, rb->len)) != 0)  in ssh_krl_to_blob()
749 	if (sshbuf_len(sect) != 0) {  in ssh_krl_to_blob()
751 		    (r = sshbuf_put_stringb(buf, sect)) != 0)  in ssh_krl_to_blob()
754 	sshbuf_reset(sect);  in ssh_krl_to_blob()
757 		if ((r = sshbuf_put_string(sect, rb->blob, rb->len)) != 0)  in ssh_krl_to_blob()
760 	if (sshbuf_len(sect) != 0) {  in ssh_krl_to_blob()
763 		    (r = sshbuf_put_stringb(buf, sect)) != 0)  in ssh_krl_to_blob()
785 	sshbuf_free(sect);  in ssh_krl_to_blob()
926 	struct sshbuf *copy = NULL, *sect = NULL;  in ssh_krl_from_blob()  local
1062 		if (sect != NULL) {  in ssh_krl_from_blob()
1063 			sshbuf_free(sect);  in ssh_krl_from_blob()
1064 			sect = NULL;  in ssh_krl_from_blob()
1067 		    (r = sshbuf_froms(copy, &sect)) != 0)  in ssh_krl_from_blob()
1073 			if ((r = parse_revoked_certs(sect, krl)) != 0)  in ssh_krl_from_blob()
1078 			while (sshbuf_len(sect) > 0) {  in ssh_krl_from_blob()
1079 				if ((r = sshbuf_get_string(sect,  in ssh_krl_from_blob()
1098 			sshbuf_reset(sect);  in ssh_krl_from_blob()
1099 			sect = NULL;  in ssh_krl_from_blob()
1108 		if (sshbuf_len(sect) > 0) {  in ssh_krl_from_blob()
1162 	sshbuf_free(sect);  in ssh_krl_from_blob()