From 0f8e2d8e0bff8750da6306d64dad68da3a745633 Mon Sep 17 00:00:00 2001
From: tb <>
Date: Sat, 9 May 2026 14:24:58 +0000
Subject: openssl ecparam: make EC_GROUP_check() failure result in "app"
 failure

Found by Frank Denis
---
 src/usr.bin/openssl/ecparam.c | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

(limited to 'src')

diff --git a/src/usr.bin/openssl/ecparam.c b/src/usr.bin/openssl/ecparam.c
index 285f5d563e..a4bb00f290 100644
--- a/src/usr.bin/openssl/ecparam.c
+++ b/src/usr.bin/openssl/ecparam.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ecparam.c,v 1.25 2025/01/19 10:24:17 tb Exp $ */
+/* $OpenBSD: ecparam.c,v 1.26 2026/05/09 14:24:58 tb Exp $ */
 /*
  * Written by Nils Larsch for the OpenSSL project.
  */
@@ -386,8 +386,9 @@ ecparam_main(int argc, char **argv)
 		if (!EC_GROUP_check(group, NULL)) {
 			BIO_printf(bio_err, "failed\n");
 			ERR_print_errors(bio_err);
-		} else
-			BIO_printf(bio_err, "ok\n");
+			goto end;
+		}
+		BIO_printf(bio_err, "ok\n");
 
 	}
 	if (!cfg.noout) {
-- 
cgit v1.2.3-55-g6feb