libtls: consistently handle allocation failures

Use tls_set_errorx() or tls_error_setx() rather than the versions without
x for TLS_ERROR_OUT_OF_MEMORY. ENOMEM adds no further info.

From Michael Forney

ok bcook

2 files changed, 6 insertions, 6 deletions

diff --git a/src/lib/libtls/tls_ocsp.c b/src/lib/libtls/tls_ocsp.c
index 784d911b7a..b8d855c4c8 100644
--- a/src/lib/libtls/tls_ocsp.c
+++ b/src/lib/libtls/tls_ocsp.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: tls_ocsp.c,v 1.28 2026/04/16 07:28:00 tb Exp $ */
+/*      $OpenBSD: tls_ocsp.c,v 1.29 2026/04/16 07:35:25 tb Exp $ */
 /*
  * Copyright (c) 2015 Marko Kreen <markokr@gmail.com>
  * Copyright (c) 2016 Bob Beck <beck@openbsd.org>
@@ -85,7 +85,7 @@ tls_ocsp_fill_info(struct tls *ctx, int response_status, int cert_status,
         ctx->ocsp->ocsp_result = NULL;
 
         if ((info = calloc(1, sizeof (struct tls_ocsp_result))) == NULL) {
-                tls_set_error(ctx, TLS_ERROR_OUT_OF_MEMORY, "out of memory");
+                tls_set_errorx(ctx, TLS_ERROR_OUT_OF_MEMORY, "out of memory");
                 return -1;
         }
         info->response_status = response_status;
diff --git a/src/lib/libtls/tls_signer.c b/src/lib/libtls/tls_signer.c
index ad80296830..2d6635460e 100644
--- a/src/lib/libtls/tls_signer.c
+++ b/src/lib/libtls/tls_signer.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tls_signer.c,v 1.14 2026/04/16 05:16:48 tb Exp $ */
+/* $OpenBSD: tls_signer.c,v 1.15 2026/04/16 07:35:25 tb Exp $ */
 /*
  * Copyright (c) 2021 Eric Faurot <eric@openbsd.org>
  *
@@ -147,7 +147,7 @@ tls_signer_add_keypair_mem(struct tls_signer *signer, const uint8_t *cert,
         }
 
         if ((skey = calloc(1, sizeof(*skey))) == NULL) {
-                tls_error_set(&signer->error, TLS_ERROR_OUT_OF_MEMORY,
+                tls_error_setx(&signer->error, TLS_ERROR_OUT_OF_MEMORY,
                     "out of memory");
                 goto err;
         }
@@ -233,7 +233,7 @@ tls_sign_rsa(struct tls_signer *signer, struct tls_signer_key *skey,
                 return (-1);
         }
         if ((signature = calloc(1, rsa_size)) == NULL) {
-                tls_error_set(&signer->error, TLS_ERROR_OUT_OF_MEMORY,
+                tls_error_setx(&signer->error, TLS_ERROR_OUT_OF_MEMORY,
                     "out of memory");
                 return (-1);
         }
@@ -281,7 +281,7 @@ tls_sign_ecdsa(struct tls_signer *signer, struct tls_signer_key *skey,
                 return (-1);
         }
         if ((signature = calloc(1, signature_len)) == NULL) {
-                tls_error_set(&signer->error, TLS_ERROR_OUT_OF_MEMORY,
+                tls_error_setx(&signer->error, TLS_ERROR_OUT_OF_MEMORY,
                     "out of memory");
                 return (-1);
         }