denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check rng return value when generating ME CONNECT_ID and KEY

Browse Source
This commit is contained in:
Tobias Brunner
2012-07-16 14:53:35 +02:00
committed by Martin Willi
parent 1bb9c51e87
commit f1c78cfee7
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/tasks/ike_me.c
+14 -2
View File
@@ -291,9 +291,21 @@ METHOD(task_t, build_i, status_t,
{ {
/* only the initiator creates a connect ID. the responder /* only the initiator creates a connect ID. the responder
* returns the connect ID that it received from the initiator */ * returns the connect ID that it received from the initiator */
rng->allocate_bytes(rng, ME_CONNECTID_LEN, &this->connect_id); if (!rng->allocate_bytes(rng, ME_CONNECTID_LEN,
&this->connect_id))
{
DBG1(DBG_IKE, "unable to generate ID for ME_CONNECT");
rng->destroy(rng);
return FAILED;
}
}
if (!rng->allocate_bytes(rng, ME_CONNECTKEY_LEN,
&this->connect_key))
{
DBG1(DBG_IKE, "unable to generate connect key for ME_CONNECT");
rng->destroy(rng);
return FAILED;
} }
rng->allocate_bytes(rng, ME_CONNECTKEY_LEN, &this->connect_key);
rng->destroy(rng); rng->destroy(rng);
message->add_notify(message, FALSE, ME_CONNECTID, this->connect_id); message->add_notify(message, FALSE, ME_CONNECTID, this->connect_id);