From 5eb039b0fc4e1e87f2b77fc8150abd2c9f9f518b Mon Sep 17 00:00:00 2001 From: job <> Date: Tue, 24 Jan 2023 09:48:57 +0000 Subject: Check return value of X509_digest OK tb@ --- src/lib/libcrypto/pkcs12/p12_crt.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/lib/libcrypto/pkcs12/p12_crt.c b/src/lib/libcrypto/pkcs12/p12_crt.c index 79e21d9b92..8655be108e 100644 --- a/src/lib/libcrypto/pkcs12/p12_crt.c +++ b/src/lib/libcrypto/pkcs12/p12_crt.c @@ -1,4 +1,4 @@ -/* $OpenBSD: p12_crt.c,v 1.21 2022/11/12 13:03:28 beck Exp $ */ +/* $OpenBSD: p12_crt.c,v 1.22 2023/01/24 09:48:57 job Exp $ */ /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL * project. */ @@ -113,7 +113,8 @@ PKCS12_create(const char *pass, const char *name, EVP_PKEY *pkey, X509 *cert, if (pkey && cert) { if (!X509_check_private_key(cert, pkey)) return NULL; - X509_digest(cert, EVP_sha1(), keyid, &keyidlen); + if (!X509_digest(cert, EVP_sha1(), keyid, &keyidlen)) + return NULL; } if (cert) { -- cgit v1.2.3-55-g6feb