If we're going to return errors (no matter how stupid), then we should

[openssl.git] / apps / ts.c

diff --git a/apps/ts.c b/apps/ts.c
index 08b8c4a9e1ee9ac0544162850b19b8b5589f1e76..74e7e932b3abbd257745a6e8d8dcef73b04f254d 100644 (file)
--- a/apps/ts.c
+++ b/apps/ts.c
@@ -598,6 +598,8 @@ static int create_digest(BIO *input, char *digest, const EVP_MD *md,
        int md_value_len;
 
        md_value_len = EVP_MD_size(md);
        int md_value_len;
 
        md_value_len = EVP_MD_size(md);

+       if (md_value_len < 0)
+           goto err;

        if (input)
                {
                /* Digest must be computed from an input file. */
        if (input)
                {
                /* Digest must be computed from an input file. */