ossl_kdf_ctx_create(): Check for NULL KDF being fetched

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/19784)

diff --git a/crypto/hpke/hpke_util.c b/crypto/hpke/hpke_util.c
index e2d28bbb58d2edca25e9853d490ea47eac95b455..0db5f9ce2f9272b77944ca54be0ae47d2a337e1f 100644 (file)
--- a/crypto/hpke/hpke_util.c
+++ b/crypto/hpke/hpke_util.c
@@ -393,6 +393,10 @@ EVP_KDF_CTX *ossl_kdf_ctx_create(const char *kdfname, const char *mdname,
     EVP_KDF_CTX *kctx = NULL;
 
     kdf = EVP_KDF_fetch(libctx, kdfname, propq);
+    if (kdf == NULL) {
+        ERR_raise(ERR_LIB_CRYPTO, ERR_R_FETCH_FAILED);
+        return NULL;
+    }
     kctx = EVP_KDF_CTX_new(kdf);
     EVP_KDF_free(kdf);
     if (kctx != NULL && mdname != NULL) {