From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 6 Jul 2012 08:09:25 +0000 (+0200)
Subject: Check rng return value when generating nonces in eap-aka plugin
X-Git-Tag: 5.0.1~330
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8beeb8e116845ee23081b8ee7dc5365a4b9df039;p=thirdparty%2Fstrongswan.git

Check rng return value when generating nonces in eap-aka plugin
---

diff --git a/src/libcharon/plugins/eap_aka/eap_aka_server.c b/src/libcharon/plugins/eap_aka/eap_aka_server.c
index 5ad077d108..b7608382d3 100644
--- a/src/libcharon/plugins/eap_aka/eap_aka_server.c
+++ b/src/libcharon/plugins/eap_aka/eap_aka_server.c
@@ -249,7 +249,10 @@ static status_t reauthenticate(private_eap_aka_server_t *this,
 	DBG1(DBG_IKE, "initiating EAP-AKA reauthentication");
 
 	rng = this->crypto->get_rng(this->crypto);
-	rng->allocate_bytes(rng, NONCE_LEN, &this->nonce);
+	if (!rng->allocate_bytes(rng, NONCE_LEN, &this->nonce))
+	{
+		return FAILED;
+	}
 
 	mkc = chunk_create(mk, HASH_SIZE_SHA1);
 	counter = htons(counter);