upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-02-18 18:18:06 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

ITS#10224 libldap: check for OpenSSL EVP_Digest* failure

Browse source
This commit is contained in:
Howard Chu 2024-06-07 15:33:04 +01:00 committed by Quanah Gibson-Mount
parent 07dc2133c9
commit bee6e76cd9
1 changed files with 8 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
libraries/libldap/tls_o.c
View file

@ -1170,15 +1170,19 @@ tlso_session_pinning( LDAP *ld, tls_session *sess, char *hashalg, struct berval
goto done;
}
EVP_DigestInit_ex( mdctx, md, NULL );
EVP_DigestUpdate( mdctx, key.bv_val, key.bv_len );
EVP_DigestFinal_ex( mdctx, (unsigned char *)keyhash.bv_val, &len );
keyhash.bv_len = len;
if ( EVP_DigestInit_ex( mdctx, md, NULL ) &&
EVP_DigestUpdate( mdctx, key.bv_val, key.bv_len ) &&
EVP_DigestFinal_ex( mdctx, (unsigned char *)keyhash.bv_val, &len ))
keyhash.bv_len = len;
else
rc = -1;
#if OPENSSL_VERSION_NUMBER >= 0x10100000
EVP_MD_CTX_free( mdctx );
#else
EVP_MD_CTX_destroy( mdctx );
#endif
if ( rc )
goto done;
} else {
keyhash = key;
}