Commit a8d3dbe1 authored by Pauli's avatar Pauli
Browse files

Check for a failure return from EVP_MD_CTX_new() in OCSP_basic_sign(). 



Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7087)
parent 59701e63

crypto/ocsp/ocsp_srv.c

+3 −0
Original line number Diff line number Diff line
@@ -237,6 +237,9 @@ int OCSP_basic_sign(OCSP_BASICRESP *brsp, 
    EVP_PKEY_CTX *pkctx = NULL;

    int i;



    if (ctx == NULL)

        return 0;



    if (!EVP_DigestSignInit(ctx, &pkctx, dgst, NULL, key)) {

        EVP_MD_CTX_free(ctx);

        return 0;