From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 30 Sep 2009 23:49:11 +0000 (+0000)
Subject: PR: 2058
X-Git-Tag: OpenSSL-fips-2_0-rc1~1518
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=d71061122cd91a493d69c313c68063fe8d02e3e9;p=oweals%2Fopenssl.git

PR: 2058
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org

Correct EVP_DigestVerifyFinal error handling.
---

diff --git a/crypto/cms/cms_sd.c b/crypto/cms/cms_sd.c
index 83711d8af4..77fbd13596 100644
--- a/crypto/cms/cms_sd.c
+++ b/crypto/cms/cms_sd.c
@@ -800,7 +800,7 @@ int CMS_SignerInfo_verify(CMS_SignerInfo *si)
 		}
 	r = EVP_DigestVerifyFinal(&mctx,
 			si->signature->data, si->signature->length);
-	if (!r)
+	if (r <= 0)
 		CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY, CMS_R_VERIFICATION_FAILURE);
 	err:
 	EVP_MD_CTX_cleanup(&mctx);