Check rng return value when generating nonces in eap-aka plugin

diff --git a/src/libcharon/plugins/eap_aka/eap_aka_server.c b/src/libcharon/plugins/eap_aka/eap_aka_server.c
index 5ad077d108a9330169a7869dfd8a8f78e66b90c6..b7608382d3c8a5dc73f5bed66b00e86039acf293 100644 (file)
--- a/src/libcharon/plugins/eap_aka/eap_aka_server.c
+++ b/src/libcharon/plugins/eap_aka/eap_aka_server.c
@@ -249,7 +249,10 @@ static status_t reauthenticate(private_eap_aka_server_t *this,
        DBG1(DBG_IKE, "initiating EAP-AKA reauthentication");
 
        rng = this->crypto->get_rng(this->crypto);
-       rng->allocate_bytes(rng, NONCE_LEN, &this->nonce);
+       if (!rng->allocate_bytes(rng, NONCE_LEN, &this->nonce))
+       {
+               return FAILED;
+       }
 
        mkc = chunk_create(mk, HASH_SIZE_SHA1);
        counter = htons(counter);