commit 2c4a056f59a6819b8a0d40e3a7e11cf6d35b3e88
author Matt Caswell <matt@openssl.org> Fri Jun 03 11:59:19 2016 +0100
committer Matt Caswell <matt@openssl.org> Fri Jun 03 20:29:04 2016 +0100
tree c9d9275b21fc98c0f18f44729c1b0cbaf93c1a50
parent fa28bfd66fc221e18ee57134e42b54b4012e66db

Handle a memory allocation failure in ssl3_init_finished_mac()

The ssl3_init_finished_mac() function can fail, in which case we need to
propagate the error up through the stack.

RT#3198

Reviewed-by: Rich Salz <rsalz@openssl.org>

ssl/statem/statem_clnt.c

diff --git a/ssl/statem/statem_clnt.c b/ssl/statem/statem_clnt.c
index ecbc43b..a97f0cc 100644
--- a/ssl/statem/statem_clnt.c
+++ b/ssl/statem/statem_clnt.c
@@ -391,7 +391,10 @@
         s->shutdown = 0;
         if (SSL_IS_DTLS(s)) {
             /* every DTLS ClientHello resets Finished MAC */
-            ssl3_init_finished_mac(s);
+            if (!ssl3_init_finished_mac(s)) {
+                ossl_statem_set_error(s);
+                return WORK_ERROR;
+            }
         }
         break;