ssl_kex: ensure decode_error alert is raised

1 files changed, 13 insertions, 1 deletions

diff --git a/src/regress/lib/libssl/unit/ssl_kex.c b/src/regress/lib/libssl/unit/ssl_kex.c
index 0fc15033c0..8b4f644a41 100644
--- a/src/regress/lib/libssl/unit/ssl_kex.c
+++ b/src/regress/lib/libssl/unit/ssl_kex.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: ssl_kex.c,v 1.2 2026/06/08 11:41:21 tb Exp $ */
+/*      $OpenBSD: ssl_kex.c,v 1.3 2026/06/09 05:17:24 tb Exp $ */
 
 /*
  * Copyright (c) 2026 Theo Buehler <tb@openbsd.org>
@@ -121,6 +121,10 @@ ssl_key_share_ecdhe_test(void)
                 fprintf(stderr, "FAIL: parsed point at infinity\n");
                 failed |= 1;
         }
+        if (!decode_error) {
+                fprintf(stderr, "FAIL: no decode_error for point at infinity\n");
+                failed |= 1;
+        }
 
         EC_KEY_free(ecdh_peer);
         ecdh_peer = NULL;
@@ -133,6 +137,10 @@ ssl_key_share_ecdhe_test(void)
                 fprintf(stderr, "FAIL: parsed compressed P-384 point\n");
                 failed |= 1;
         }
+        if (!decode_error) {
+                fprintf(stderr, "FAIL: no decode_error for compressed P-384 point\n");
+                failed |= 1;
+        }
 
         EC_KEY_free(ecdh_peer);
         ecdh_peer = NULL;
@@ -145,6 +153,10 @@ ssl_key_share_ecdhe_test(void)
                 fprintf(stderr, "FAIL: parsed hybrid P-384 point\n");
                 failed |= 1;
         }
+        if (!decode_error) {
+                fprintf(stderr, "FAIL: no decode_error for hybrid P-384 point\n");
+                failed |= 1;
+        }
 
         EC_KEY_free(ecdh_peer);
         ecdh_peer = NULL;