summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorJoel Sing <jsing@cvs.openbsd.org>2014-06-07 17:27:15 +0000
committerJoel Sing <jsing@cvs.openbsd.org>2014-06-07 17:27:15 +0000
commitdb37dd011c635f593b39c0ba38da3ad4656aa372 (patch)
treeb7272cdacea117eeed64c928b0ff72de04655d39 /lib
parent746d87f20c4dc5b27afdca54d4f35a9dc72ac0ea (diff)
Add missing NULL check after calling EVP_PKEY_new_mac_key().
Based on Adam Langley's chromium patches.
Diffstat (limited to 'lib')
-rw-r--r--lib/libssl/src/ssl/t1_enc.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/libssl/src/ssl/t1_enc.c b/lib/libssl/src/ssl/t1_enc.c
index fba582d4ad8..59c0c487efe 100644
--- a/lib/libssl/src/ssl/t1_enc.c
+++ b/lib/libssl/src/ssl/t1_enc.c
@@ -487,6 +487,8 @@ tls1_change_cipher_state(SSL *s, int which)
if (!(EVP_CIPHER_flags(cipher) & EVP_CIPH_FLAG_AEAD_CIPHER)) {
mac_key = EVP_PKEY_new_mac_key(mac_type, NULL,
mac_secret, mac_secret_size);
+ if (mac_key == NULL)
+ goto err;
EVP_DigestSignInit(mac_ctx, NULL, mac, NULL, mac_key);
EVP_PKEY_free(mac_key);
}