summaryrefslogtreecommitdiffstats
path: root/lib/libssl/t1_enc.c
diff options
context:
space:
mode:
authorjsing <jsing@openbsd.org>2017-03-25 13:42:29 +0000
committerjsing <jsing@openbsd.org>2017-03-25 13:42:29 +0000
commitce492ce0ec22691a559134f286ab8c5ddb203256 (patch)
tree2d1fd9281d66beba2f5a9ddec72d32a279b3b77e /lib/libssl/t1_enc.c
parentUpdate regress to match changes to tls1_PRF(). (diff)
downloadwireguard-openbsd-ce492ce0ec22691a559134f286ab8c5ddb203256.tar.xz
wireguard-openbsd-ce492ce0ec22691a559134f286ab8c5ddb203256.zip
Check tls1_PRF() return value in tls1_generate_master_secret().
Diffstat (limited to 'lib/libssl/t1_enc.c')
-rw-r--r--lib/libssl/t1_enc.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/lib/libssl/t1_enc.c b/lib/libssl/t1_enc.c
index 42d384db7da..e3ffe0472ee 100644
--- a/lib/libssl/t1_enc.c
+++ b/lib/libssl/t1_enc.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: t1_enc.c,v 1.106 2017/03/25 13:36:56 jsing Exp $ */
+/* $OpenBSD: t1_enc.c,v 1.107 2017/03/25 13:42:29 jsing Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -1130,12 +1130,12 @@ tls1_generate_master_secret(SSL *s, unsigned char *out, unsigned char *p,
if (len < 0)
return 0;
- /* XXX - check return value. */
- tls1_PRF(s, p, len,
+ if (!tls1_PRF(s, p, len,
TLS_MD_MASTER_SECRET_CONST, TLS_MD_MASTER_SECRET_CONST_SIZE,
s->s3->client_random, SSL3_RANDOM_SIZE, NULL, 0,
s->s3->server_random, SSL3_RANDOM_SIZE, NULL, 0,
- s->session->master_key, SSL_MAX_MASTER_KEY_LENGTH);
+ s->session->master_key, SSL_MAX_MASTER_KEY_LENGTH))
+ return 0;
return (SSL_MAX_MASTER_KEY_LENGTH);
}