diff options
| author | Petr Mikhalicin <pmikhalicin@rutoken.ru> | 2023-04-19 14:43:02 +0300 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2023-04-21 10:17:52 +0200 |
| commit | 4e5f3d691343a691ddae739c51f7ae71e9893c98 (patch) | |
| tree | d6bb530f80c4241f490cfc14fda1d2d0ed4f3687 | |
| parent | a901b31e99442f087051ae7efdcbc9ad6e6a5b33 (diff) | |
| download | openssl-new-4e5f3d691343a691ddae739c51f7ae71e9893c98.tar.gz | |
Fix checking return code of EVP_PKEY_get_int_param at check_curve
According to docs, EVP_PKEY_get_int_param should return 1 on Success, and
0 on Failure. So, fix checking of this return value at check_curve
CLA: trivial
Reviewed-by: Todd Short <todd.short@me.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20770)
| -rw-r--r-- | crypto/x509/x509_vfy.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c index cc02c1ccc4..3c7b7a563a 100644 --- a/crypto/x509/x509_vfy.c +++ b/crypto/x509/x509_vfy.c @@ -3642,7 +3642,7 @@ static int check_curve(X509 *cert) EVP_PKEY_get_int_param(pkey, OSSL_PKEY_PARAM_EC_DECODED_FROM_EXPLICIT_PARAMS, &val); - return ret < 0 ? ret : !val; + return ret == 1 ? !val : -1; } /*- |