diff options
| author | Colin Percival <cperciva@FreeBSD.org> | 2006-09-29 13:46:41 +0000 |
|---|---|---|
| committer | Colin Percival <cperciva@FreeBSD.org> | 2006-09-29 13:46:41 +0000 |
| commit | 03de91198524923dce0f9f58d5af77235f340e5e (patch) | |
| tree | ef4566808b7cdca7dab3c0df958831d73c238bfb /crypto/openssl/crypto/dh/dh_key.c | |
| parent | 30a6ffb3330a4ce39d12906a7dda5c4d9ed91dc3 (diff) | |
| download | src-03de91198524923dce0f9f58d5af77235f340e5e.tar.gz src-03de91198524923dce0f9f58d5af77235f340e5e.zip | |
Correct problem in the 2006-09-28 patch concerning the handling of
excessively large DH moduli.
Reported by: Steve Kiernan (Juniper SIRT)
Security: FreeBSD-SA-06:23.openssl
Approved by: so (cperciva)
Notes
Notes:
svn path=/releng/4.11/; revision=162788
Diffstat (limited to 'crypto/openssl/crypto/dh/dh_key.c')
| -rw-r--r-- | crypto/openssl/crypto/dh/dh_key.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/openssl/crypto/dh/dh_key.c b/crypto/openssl/crypto/dh/dh_key.c index 649aa5cffde4..3faf94a7f704 100644 --- a/crypto/openssl/crypto/dh/dh_key.c +++ b/crypto/openssl/crypto/dh/dh_key.c @@ -165,7 +165,7 @@ static int compute_key(unsigned char *key, const BIGNUM *pub_key, DH *dh) if (BN_num_bits(dh->p) > OPENSSL_DH_MAX_MODULUS_BITS) { DHerr(DH_F_DH_COMPUTE_KEY,DH_R_MODULUS_TOO_LARGE); - goto err; + return -1; } ctx = BN_CTX_new(); |