denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check rng return value when generating SPIs in kernel-klips plugin

Browse Source
This commit is contained in:
Tobias Brunner
2012-07-16 14:53:36 +02:00
committed by Martin Willi
parent 99dc3d2c15
commit 0159a54047
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libhydra/plugins/kernel_klips/kernel_klips_ipsec.c
+3 -3
View File
@@ -1520,12 +1520,12 @@ METHOD(kernel_ipsec_t, get_spi, status_t,
u_int32_t spi_gen; u_int32_t spi_gen;
rng = lib->crypto->create_rng(lib->crypto, RNG_WEAK); rng = lib->crypto->create_rng(lib->crypto, RNG_WEAK);
if (!rng) if (!rng || !rng->get_bytes(rng, sizeof(spi_gen), (void*)&spi_gen))
{ {
DBG1(DBG_KNL, "allocating SPI failed: no RNG"); DBG1(DBG_KNL, "allocating SPI failed");
DESTROY_IF(rng);
return FAILED; return FAILED;
} }
rng->get_bytes(rng, sizeof(spi_gen), (void*)&spi_gen);
rng->destroy(rng); rng->destroy(rng);
/* allocated SPIs lie within the range from 0xc0000000 to 0xcFFFFFFF */ /* allocated SPIs lie within the range from 0xc0000000 to 0xcFFFFFFF */