Sanity check the return from final_finish_mac
authorMatt Caswell <matt@openssl.org>
Tue, 28 Apr 2015 14:19:50 +0000 (15:19 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 30 Apr 2015 22:21:53 +0000 (23:21 +0100)
commit75862f7741d52651eefc2ae71e81a0d0e9d4c5ec
treed44400989d7d6b7b25b7e652cf84f38c3c662ef0
parent99ceb2d40c70fa8405151669578afb3be1d7c8c6
Sanity check the return from final_finish_mac

The return value is checked for 0. This is currently safe but we should
really check for <= 0 since -1 is frequently used for error conditions.
Thanks to Kevin Wojtysiak (Int3 Solutions) and Paramjot Oberoi (Int3
Solutions) for reporting this issue.

Reviewed-by: Andy Polyakov <appro@openssl.org>
(cherry picked from commit c427570e5098e120cbcb66e799f85c317aac7b91)

Conflicts:
ssl/ssl_locl.h
ssl/s3_both.c
ssl/ssl_locl.h