Add proper checks against fgets failure. From Charles Longeau.

OK moritz@, millert@, and jaredy@.

2 files changed, 4 insertions, 2 deletions

diff --git a/src/lib/libcrypto/ui/ui_openssl.c b/src/lib/libcrypto/ui/ui_openssl.c
index 75318d48a1..d03aeba91a 100644
--- a/src/lib/libcrypto/ui/ui_openssl.c
+++ b/src/lib/libcrypto/ui/ui_openssl.c
@@ -383,7 +383,8 @@ static void read_till_nl(FILE *in)
         char buf[SIZE+1];
 
         do      {
-                fgets(buf,SIZE,in);
+                if (fgets(buf,sizeof(buf),in) == NULL)
+                        break;
                 } while (strchr(buf,'\n') == NULL);
         }
 
diff --git a/src/lib/libssl/src/crypto/ui/ui_openssl.c b/src/lib/libssl/src/crypto/ui/ui_openssl.c
index 75318d48a1..d03aeba91a 100644
--- a/src/lib/libssl/src/crypto/ui/ui_openssl.c
+++ b/src/lib/libssl/src/crypto/ui/ui_openssl.c
@@ -383,7 +383,8 @@ static void read_till_nl(FILE *in)
         char buf[SIZE+1];
 
         do      {
-                fgets(buf,SIZE,in);
+                if (fgets(buf,sizeof(buf),in) == NULL)
+                        break;
                 } while (strchr(buf,'\n') == NULL);
         }