commit | 0eab41fb78cf4d7c76e563fd677ab6c32fc28bb0 | [log] [tgz] |
---|---|---|
author | Ben Laurie <ben@openssl.org> | Mon Dec 29 16:11:58 2008 +0000 |
committer | Ben Laurie <ben@openssl.org> | Mon Dec 29 16:11:58 2008 +0000 |
tree | da848c7424ced86fc60823f4948b0fc79e52a381 | |
parent | 8aa02e97a782a4229936d5df6da42db3efe4acd1 [diff] [blame] |
If we're going to return errors (no matter how stupid), then we should test for them!
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index e6ba33d..c1d4173 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c
@@ -1532,6 +1532,11 @@ * integrity checks on ticket. */ mlen = HMAC_size(&hctx); + if (mlen < 0) + { + EVP_CIPHER_CTX_cleanup(&ctx); + return -1; + } eticklen -= mlen; /* Check HMAC of encrypted ticket */ HMAC_Update(&hctx, etick, eticklen);