Check BN_dup results in rsa_check

(cherry picked from commit a47235f4f5af0286aadd43eeccf946a8f35a5dc8)

diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index d01d0b03cbb6e1b24a6ddfd8f07e405d88704667..2c5b967aa136169d2524272b7328138a53042a05 100644 (file)
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -991,6 +991,9 @@ rsa_check(RSA *rsa, RSA *pub) {
                        }
                } else {
                        n = BN_dup(n2);
+                       if (n == NULL) {
+                               return (ISC_R_NOMEMORY);
+                       }
                }
                if (e1 != NULL) {
                        if (BN_cmp(e1, e2) != 0) {
@@ -1001,6 +1004,12 @@ rsa_check(RSA *rsa, RSA *pub) {
                        }
                } else {
                        e = BN_dup(e2);
+                       if (e == NULL) {
+                               if (n != NULL) {
+                                       BN_free(n);
+                               }
+                               return (ISC_R_NOMEMORY);
+                       }
                }
                if (RSA_set0_key(rsa, n, e, NULL) == 0) {
                        if (n != NULL) {