]> www.wagner.pp.ru Git - openssl-gost/engine.git/commitdiff
gost_ec_keyx: Fix CID 253283 Unchecked return value in VKO_compute_key 175/head
authorVitaly Chikunov <vt@altlinux.org>
Wed, 25 Sep 2019 23:19:36 +0000 (02:19 +0300)
committerVitaly Chikunov <vt@altlinux.org>
Wed, 25 Sep 2019 23:23:37 +0000 (02:23 +0300)
Calling EC_POINT_get_affine_coordinates() without checking
return value.
Some fixes for Coverity Scan from issue #174.

gost_ec_keyx.c

index b82c6f1859e5fe5bf249565e96282c563a9f26a3..fa068aec45c0fcacaf37bc8415d4d954481bc3f1 100644 (file)
@@ -59,8 +59,11 @@ int VKO_compute_key(unsigned char *shared_key,
         GOSTerr(GOST_F_VKO_COMPUTE_KEY, GOST_R_ERROR_POINT_MUL);
         goto err;
     }
-    EC_POINT_get_affine_coordinates(EC_KEY_get0_group(priv_key),
-                                        pnt, X, Y, ctx);
+    if (!EC_POINT_get_affine_coordinates(EC_KEY_get0_group(priv_key),
+                                        pnt, X, Y, ctx)) {
+       GOSTerr(GOST_F_VKO_COMPUTE_KEY, ERR_R_EC_LIB);
+       goto err;
+    }
 
     half_len = BN_num_bytes(order);
     buf_len = 2 * half_len;