openssl ecparam: make EC_GROUP_check() failure result in "app" failure

Found by Frank Denis

1 files changed, 4 insertions, 3 deletions

diff --git a/src/usr.bin/openssl/ecparam.c b/src/usr.bin/openssl/ecparam.c
index 285f5d563e..a4bb00f290 100644
--- a/src/usr.bin/openssl/ecparam.c
+++ b/src/usr.bin/openssl/ecparam.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ecparam.c,v 1.25 2025/01/19 10:24:17 tb Exp $ */
+/* $OpenBSD: ecparam.c,v 1.26 2026/05/09 14:24:58 tb Exp $ */
 /*
  * Written by Nils Larsch for the OpenSSL project.
  */
@@ -386,8 +386,9 @@ ecparam_main(int argc, char **argv)
                 if (!EC_GROUP_check(group, NULL)) {
                         BIO_printf(bio_err, "failed\n");
                         ERR_print_errors(bio_err);
-                } else
-                        BIO_printf(bio_err, "ok\n");
+                        goto end;
+                }
+                BIO_printf(bio_err, "ok\n");
 
         }
         if (!cfg.noout) {