Avoid calling EVP_CIPHER_CTX_reset() on a NULL ctx

1 files changed, 3 insertions, 2 deletions

diff --git a/src/lib/libcrypto/cmac/cmac.c b/src/lib/libcrypto/cmac/cmac.c
index 29f5048897..42f630c149 100644
--- a/src/lib/libcrypto/cmac/cmac.c
+++ b/src/lib/libcrypto/cmac/cmac.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: cmac.c,v 1.19 2024/01/28 14:55:40 joshua Exp $ */
+/* $OpenBSD: cmac.c,v 1.20 2024/01/28 20:57:15 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project.
  */
@@ -131,7 +131,8 @@ LCRYPTO_ALIAS(CMAC_CTX_new);
 void
 CMAC_CTX_cleanup(CMAC_CTX *ctx)
 {
-        EVP_CIPHER_CTX_reset(ctx->cipher_ctx);
+        if (ctx->cipher_ctx != NULL)
+                EVP_CIPHER_CTX_reset(ctx->cipher_ctx);
         explicit_bzero(ctx->tbl, EVP_MAX_BLOCK_LENGTH);
         explicit_bzero(ctx->k1, EVP_MAX_BLOCK_LENGTH);
         explicit_bzero(ctx->k2, EVP_MAX_BLOCK_LENGTH);