denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check rng return value when generating TLS session identifiers

Browse Source
This commit is contained in:
Martin Willi
2012-07-16 14:53:37 +02:00
parent 6a3e4ed916
commit bb5eb15ccc
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_server.c
+3 -3
View File
@@ -313,11 +313,11 @@ static status_t process_client_hello(private_tls_server_t *this,
return NEED_MORE; return NEED_MORE;
} }
rng = lib->crypto->create_rng(lib->crypto, RNG_STRONG); rng = lib->crypto->create_rng(lib->crypto, RNG_STRONG);
if (rng) if (!rng || !rng->allocate_bytes(rng, SESSION_ID_SIZE, &this->session))
{ {
rng->allocate_bytes(rng, SESSION_ID_SIZE, &this->session); DBG1(DBG_TLS, "generating TLS session identifier failed, skipped");
rng->destroy(rng);
} }
DESTROY_IF(rng);
DBG1(DBG_TLS, "negotiated %N using suite %N", DBG1(DBG_TLS, "negotiated %N using suite %N",
tls_version_names, this->tls->get_version(this->tls), tls_version_names, this->tls->get_version(this->tls),
tls_cipher_suite_names, this->suite); tls_cipher_suite_names, this->suite);