Check rng return value when generating RAND in eap-aka-3gpp2 plugin

diff --git a/src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_provider.c b/src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_provider.c
index b2b43da2a3e0ebdb3973982caa5d8edb9184a77a..317a820c0462d11a5490879ea6f9b0f6195ddcb1 100644 (file)
--- a/src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_provider.c
+++ b/src/libcharon/plugins/eap_aka_3gpp2/eap_aka_3gpp2_provider.c
@@ -90,12 +90,12 @@ METHOD(simaka_provider_t, get_quintuplet, bool,
 
        /* generate RAND: we use a registered RNG, not f0() proposed in S.S0055 */
        rng = lib->crypto->create_rng(lib->crypto, RNG_WEAK);
-       if (!rng)
+       if (!rng || !rng->get_bytes(rng, AKA_RAND_LEN, rand))
        {
                DBG1(DBG_IKE, "generating RAND for AKA failed");
+               DESTROY_IF(rng);
                return FALSE;
        }
-       rng->get_bytes(rng, AKA_RAND_LEN, rand);
        rng->destroy(rng);
 
        if (!eap_aka_3gpp2_get_k(id, k))