From: Brad Spencer <bspencer@blackberry.com>
Date: Wed, 20 Dec 2017 17:41:14 +0000 (-0400)
Subject: Test the result of CMS_RecipientInfo_ktri_get0_algs() before using its output in... 
X-Git-Tag: OpenSSL_1_1_1-pre3~206
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=178989b4a3ed714fa169cae5865c75f156ec9fdb;p=oweals%2Fopenssl.git

Test the result of CMS_RecipientInfo_ktri_get0_algs() before using its output in rsa_cms_encrypt().

CLA: trivial

Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4966)
---

diff --git a/crypto/rsa/rsa_ameth.c b/crypto/rsa/rsa_ameth.c
index 98121b5e64..de9e3c1077 100644
--- a/crypto/rsa/rsa_ameth.c
+++ b/crypto/rsa/rsa_ameth.c
@@ -967,7 +967,8 @@ static int rsa_cms_encrypt(CMS_RecipientInfo *ri)
     int pad_mode = RSA_PKCS1_PADDING, rv = 0, labellen;
     unsigned char *label;
 
-    CMS_RecipientInfo_ktri_get0_algs(ri, NULL, NULL, &alg);
+    if (CMS_RecipientInfo_ktri_get0_algs(ri, NULL, NULL, &alg) <= 0)
+        return 0;
     if (pkctx) {
         if (EVP_PKEY_CTX_get_rsa_padding(pkctx, &pad_mode) <= 0)
             return 0;