Add some missing return value checks

Some misc return value checks

Reviewed-by: Rich Salz <rsalz@openssl.org>

diff --git a/crypto/bn/bn_prime.c b/crypto/bn/bn_prime.c
index bdfa558a7e6e34403915432b792558c07c300ec1..81c2391ef898895d5da886bf6cc888b243670815 100644 (file)
--- a/crypto/bn/bn_prime.c
+++ b/crypto/bn/bn_prime.c
@@ -340,7 +340,8 @@ int bn_probable_prime_dh_coprime(BIGNUM *rnd, int bits, BN_CTX *ctx)
     if ((offset_count = BN_CTX_get(ctx)) == NULL)
         goto err;
 
     if ((offset_count = BN_CTX_get(ctx)) == NULL)
         goto err;
 

-    BN_add_word(offset_count, prime_offset_count);
+    if (!BN_add_word(offset_count, prime_offset_count))
+        goto err;

 
  loop:
     if (!BN_rand(rnd, bits - prime_multiplier_bits, 0, 1))
 
  loop:
     if (!BN_rand(rnd, bits - prime_multiplier_bits, 0, 1))


@@ -350,8 +351,9 @@ int bn_probable_prime_dh_coprime(BIGNUM *rnd, int bits, BN_CTX *ctx)
     if (!BN_rand_range(offset_index, offset_count))
         goto err;
 
     if (!BN_rand_range(offset_index, offset_count))
         goto err;
 

-    BN_mul_word(rnd, prime_multiplier);
-    BN_add_word(rnd, prime_offsets[BN_get_word(offset_index)]);
+    if (!BN_mul_word(rnd, prime_multiplier)
+        || !BN_add_word(rnd, prime_offsets[BN_get_word(offset_index)]))
+        goto err;

 
     /* we now have a random number 'rand' to test. */
 
 
     /* we now have a random number 'rand' to test. */
 

diff --git a/crypto/bn/bn_print.c b/crypto/bn/bn_print.c
index 78589dba5bdb3549f92290ee3004774e6dc3fba2..8672c7e3b32036f9b9b0b4eaac3aa16c295c7427 100644 (file)
--- a/crypto/bn/bn_print.c
+++ b/crypto/bn/bn_print.c
@@ -241,8 +241,9 @@ int BN_dec2bn(BIGNUM **bn, const char *a)
         l += *a - '0';
         a++;
         if (++j == BN_DEC_NUM) {
         l += *a - '0';
         a++;
         if (++j == BN_DEC_NUM) {

-            BN_mul_word(ret, BN_DEC_CONV);
-            BN_add_word(ret, l);
+            if (!BN_mul_word(ret, BN_DEC_CONV)
+                || !BN_add_word(ret, l))
+                goto err;

             l = 0;
             j = 0;
         }
             l = 0;
             j = 0;
         }

diff --git a/crypto/evp/e_rc2.c b/crypto/evp/e_rc2.c
index 8286424bb50e4fdfe92597c38d13bd0c1263ddb2..ed10bb33248df53e92fdcfb1784ffe4995780ca8 100644 (file)
--- a/crypto/evp/e_rc2.c
+++ b/crypto/evp/e_rc2.c
@@ -130,16 +130,17 @@ static int rc2_get_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
         OPENSSL_assert(l <= sizeof(iv));
         i = ASN1_TYPE_get_int_octetstring(type, &num, iv, l);
         if (i != (int)l)
         OPENSSL_assert(l <= sizeof(iv));
         i = ASN1_TYPE_get_int_octetstring(type, &num, iv, l);
         if (i != (int)l)

-            return (-1);
+            return -1;

         key_bits = rc2_magic_to_meth((int)num);
         if (!key_bits)
         key_bits = rc2_magic_to_meth((int)num);
         if (!key_bits)

-            return (-1);
+            return -1;

         if (i > 0 && !EVP_CipherInit_ex(c, NULL, NULL, NULL, iv, -1))
             return -1;
         EVP_CIPHER_CTX_ctrl(c, EVP_CTRL_SET_RC2_KEY_BITS, key_bits, NULL);
         if (i > 0 && !EVP_CipherInit_ex(c, NULL, NULL, NULL, iv, -1))
             return -1;
         EVP_CIPHER_CTX_ctrl(c, EVP_CTRL_SET_RC2_KEY_BITS, key_bits, NULL);

-        EVP_CIPHER_CTX_set_key_length(c, key_bits / 8);
+        if (EVP_CIPHER_CTX_set_key_length(c, key_bits / 8) <= 0)
+            return -1;

     }
     }

-    return (i);
+    return i;

 }
 
 static int rc2_set_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
 }
 
 static int rc2_set_asn1_type_and_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)

diff --git a/crypto/pkcs7/pk7_doit.c b/crypto/pkcs7/pk7_doit.c
index 1333e4df4d2d093091f3afad4406c320cd1a4748..24022416d225401d6272fdfd0178c50382a6f071 100644 (file)
--- a/crypto/pkcs7/pk7_doit.c
+++ b/crypto/pkcs7/pk7_doit.c
@@ -775,7 +775,8 @@ int PKCS7_dataFinal(PKCS7 *p7, BIO *bio)
             goto err;
         if (!EVP_DigestFinal_ex(mdc, md_data, &md_len))
             goto err;
             goto err;
         if (!EVP_DigestFinal_ex(mdc, md_data, &md_len))
             goto err;

-        ASN1_OCTET_STRING_set(p7->d.digest->digest, md_data, md_len);
+        if (!ASN1_OCTET_STRING_set(p7->d.digest->digest, md_data, md_len))
+            goto err;

     }
 
     if (!PKCS7_is_detached(p7)) {
     }
 
     if (!PKCS7_is_detached(p7)) {

diff --git a/ssl/s3_enc.c b/ssl/s3_enc.c
index f7089bd6fb858b4bba704ac31e578ec710060948..b6de38d90ba02d4d7bcec941a52aeee240ce3fce 100644 (file)
--- a/ssl/s3_enc.c
+++ b/ssl/s3_enc.c
@@ -415,7 +415,10 @@ int ssl3_final_finish_mac(SSL *s, const char *sender, int len, unsigned char *p)
         SSLerr(SSL_F_SSL3_FINAL_FINISH_MAC, ERR_R_MALLOC_FAILURE);
         return 0;
     }
         SSLerr(SSL_F_SSL3_FINAL_FINISH_MAC, ERR_R_MALLOC_FAILURE);
         return 0;
     }

-    EVP_MD_CTX_copy_ex(ctx, s->s3->handshake_dgst);
+    if (!EVP_MD_CTX_copy_ex(ctx, s->s3->handshake_dgst)) {
+        SSLerr(SSL_F_SSL3_FINAL_FINISH_MAC, ERR_R_INTERNAL_ERROR);
+        return 0;
+    }

 
     ret = EVP_MD_CTX_size(ctx);
     if (ret < 0) {
 
     ret = EVP_MD_CTX_size(ctx);
     if (ret < 0) {