From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 25 Jun 2012 14:07:12 +0000 (+0200)
Subject: Check rng return value when seeding OpenSSL RNG
X-Git-Tag: 5.0.1~337
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=99dc3d2c1570b3d0d8efff15e78f67eb6ae0ff24;p=thirdparty%2Fstrongswan.git

Check rng return value when seeding OpenSSL RNG
---

diff --git a/src/libstrongswan/plugins/openssl/openssl_plugin.c b/src/libstrongswan/plugins/openssl/openssl_plugin.c
index 7daa92bef5..08d7d15b25 100644
--- a/src/libstrongswan/plugins/openssl/openssl_plugin.c
+++ b/src/libstrongswan/plugins/openssl/openssl_plugin.c
@@ -174,7 +174,11 @@ static bool seed_rng()
 				return FALSE;
 			}
 		}
-		rng->get_bytes(rng, sizeof(buf), buf);
+		if (!rng->get_bytes(rng, sizeof(buf), buf))
+		{
+			rng->destroy(rng);
+			return FALSE;
+		}
 		RAND_seed(buf, sizeof(buf));
 	}
 	DESTROY_IF(rng);