From dacb0d8f79debfe6b47f4b17ed6a51449dd7e484 Mon Sep 17 00:00:00 2001 From: Pauli Date: Mon, 7 Jun 2021 09:42:54 +1000 Subject: [PATCH] evp: fix Coverity 1485668 argument cannot be negative Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/15635) --- crypto/evp/e_bf.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/crypto/evp/e_bf.c b/crypto/evp/e_bf.c index 734e77f0a9..e3ff568757 100644 --- a/crypto/evp/e_bf.c +++ b/crypto/evp/e_bf.c @@ -38,7 +38,11 @@ IMPLEMENT_BLOCK_CIPHER(bf, ks, BF, EVP_BF_KEY, NID_bf, 8, 16, 8, 64, static int bf_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key, const unsigned char *iv, int enc) { - BF_set_key(&data(ctx)->ks, EVP_CIPHER_CTX_get_key_length(ctx), key); + int len = EVP_CIPHER_CTX_get_key_length(ctx); + + if (len < 0) + return 0; + BF_set_key(&data(ctx)->ks, len, key); return 1; } -- 2.39.5