From f681a5a63acd72d47e3469699cb30955a22010f0 Mon Sep 17 00:00:00 2001
From: inoguchi <>
Date: Sat, 22 Jan 2022 00:31:23 +0000
Subject: X509_GET_PUBKEY(3) return value check in libcrypto

ok beck@ tb@
---
 src/lib/libcrypto/ocsp/ocsp_lib.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

(limited to 'src/lib/libcrypto/ocsp/ocsp_lib.c')

diff --git a/src/lib/libcrypto/ocsp/ocsp_lib.c b/src/lib/libcrypto/ocsp/ocsp_lib.c
index 8081a1ce85..09bccc0cfd 100644
--- a/src/lib/libcrypto/ocsp/ocsp_lib.c
+++ b/src/lib/libcrypto/ocsp/ocsp_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ocsp_lib.c,v 1.24 2022/01/07 09:45:52 tb Exp $ */
+/* $OpenBSD: ocsp_lib.c,v 1.25 2022/01/22 00:31:23 inoguchi Exp $ */
 /* Written by Tom Titchener <Tom_Titchener@groove.net> for the OpenSSL
  * project. */
 
@@ -96,7 +96,9 @@ OCSP_cert_to_id(const EVP_MD *dgst, const X509 *subject, const X509 *issuer)
 		iname = X509_get_subject_name(issuer);
 		serial = NULL;
 	}
-	ikey = X509_get0_pubkey_bitstr(issuer);
+	if ((ikey = X509_get0_pubkey_bitstr(issuer)) == NULL)
+		return NULL;
+
 	return OCSP_cert_id_new(dgst, iname, ikey, serial);
 }
 
-- 
cgit v1.2.3-55-g6feb