Check rng return value when encrypting encryption payload

diff --git a/src/libcharon/encoding/payloads/encryption_payload.c b/src/libcharon/encoding/payloads/encryption_payload.c
index 842e516d7a5516ac29a0e61911cfe0f6555ff0e9..c40bd2a2bdd49e26eba5f9efe73b08697113e4b0 100644 (file)
--- a/src/libcharon/encoding/payloads/encryption_payload.c
+++ b/src/libcharon/encoding/payloads/encryption_payload.c
@@ -356,8 +356,14 @@ METHOD(encryption_payload_t, encrypt, bool,
        crypt = chunk_create(plain.ptr, plain.len + padding.len);
        generator->destroy(generator);
 
-       rng->get_bytes(rng, iv.len, iv.ptr);
-       rng->get_bytes(rng, padding.len - 1, padding.ptr);
+       if (!rng->get_bytes(rng, iv.len, iv.ptr) ||
+               !rng->get_bytes(rng, padding.len - 1, padding.ptr))
+       {
+               DBG1(DBG_ENC, "encrypting encryption payload failed, no IV or padding");
+               rng->destroy(rng);
+               free(assoc.ptr);
+               return FALSE;
+       }
        padding.ptr[padding.len - 1] = padding.len - 1;
        rng->destroy(rng);