Submitted by: Victor B. Wagner <vitus@cryptocom.ru>

Reviewed by: steve@openssl.org

Check return codes properly in md BIO and dgst command.

diff --git a/apps/dgst.c b/apps/dgst.c
index 2abb3e0b21b9135467cf0d97bf2133dde0c5b9ec..83b79c328a4cc60b7a9efddb7c0b00069b115e2c 100644 (file)
--- a/apps/dgst.c
+++ b/apps/dgst.c
@@ -551,7 +551,7 @@ int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
          const char *sig_name, const char *md_name,
          const char *file,BIO *bmd)
        {
-       size_t len;
+       ssize_t len;
        int i;
 
        for (;;)
@@ -598,7 +598,14 @@ int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
                        }
                }
        else
+               {
                len=BIO_gets(bp,(char *)buf,BUFSIZE);
+               if (len <0) 
+                       {
+                       ERR_print_errors(bio_err);
+                       return 1;
+                       }
+               }
 
        if(binout) BIO_write(out, buf, len);
        else 

diff --git a/crypto/evp/bio_md.c b/crypto/evp/bio_md.c
index 231b56b65db59ca0f00fa727379d19aeae4eacd8..9841e32e1ab5b05fa3c5e355710f00564eaf72a2 100644 (file)
--- a/crypto/evp/bio_md.c
+++ b/crypto/evp/bio_md.c
@@ -130,8 +130,8 @@ static int md_read(BIO *b, char *out, int outl)
                {
                if (ret > 0)
                        {
-                       EVP_DigestUpdate(ctx,(unsigned char *)out,
-                               (unsigned int)ret);
+                       if (EVP_DigestUpdate(ctx,(unsigned char *)out,
+                               (unsigned int)ret)<=0) return (-1);
                        }
                }
        BIO_clear_retry_flags(b);
@@ -253,7 +253,9 @@ static int md_gets(BIO *bp, char *buf, int size)
        ctx=bp->ptr;
        if (size < ctx->digest->md_size)
                return(0);
-       EVP_DigestFinal_ex(ctx,(unsigned char *)buf,&ret);
+       if (EVP_DigestFinal_ex(ctx,(unsigned char *)buf,&ret)<=0) 
+               return -1;
+               
        return((int)ret);
        }