commit 66f96fe2d519147097c118d4bf60704c69ed0635
author Dr. Stephen Henson <steve@openssl.org> Tue Mar 18 14:19:22 2014 +0000
committer Dr. Stephen Henson <steve@openssl.org> Fri Mar 28 14:49:04 2014 +0000
tree bf79ef3375ca34b52b67ce5718ab1f92596d7fd9
parent 8b8e5bed233a2d8106296c8e460be252719e0fdd

Check return value of ssl3_output_cert_chain

ssl/s3_clnt.c

diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c
index 70c6533..efc3710 100644
--- a/ssl/s3_clnt.c
+++ b/ssl/s3_clnt.c
@@ -3380,8 +3380,13 @@
 	if (s->state == SSL3_ST_CW_CERT_C)
 		{
 		s->state=SSL3_ST_CW_CERT_D;
-		ssl3_output_cert_chain(s,
-			(s->s3->tmp.cert_req == 2)?NULL:s->cert->key);
+		if (!ssl3_output_cert_chain(s,
+			(s->s3->tmp.cert_req == 2)?NULL:s->cert->key))
+			{
+			SSLerr(SSL_F_SSL3_SEND_CLIENT_CERTIFICATE, ERR_R_INTERNAL_ERROR);
+			ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_INTERNAL_ERROR);
+			return 0;
+			}
 		}
 	/* SSL3_ST_CW_CERT_D */
 	return ssl_do_write(s);