Commit 8003138f authored by Bernd Edlinger's avatar Bernd Edlinger
Browse files

DH_check_pub_key_ex was accidentally calling DH_check, 


so results were undefined.

Reviewed-by: default avatarPaul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/9796)

(cherry picked from commit 2b95e8efcf8b99892106070d9ac745a0a369f503)
parent 1f9dc86b

crypto/dh/dh_check.c

+2 −1
Original line number Diff line number Diff line
@@ -164,7 +164,8 @@ int DH_check_pub_key_ex(const DH *dh, const BIGNUM *pub_key) 
{

    int errflags = 0;



    (void)DH_check(dh, &errflags);

    if (!DH_check_pub_key(dh, pub_key, &errflags))

        return 0;



    if ((errflags & DH_CHECK_PUBKEY_TOO_SMALL) != 0)

        DHerr(DH_F_DH_CHECK_PUB_KEY_EX, DH_R_CHECK_PUBKEY_TOO_SMALL);