check RAND_pseudo_bytes return value

[openssl.git] / crypto / dsa / dsa_gen.c

diff --git a/crypto/dsa/dsa_gen.c b/crypto/dsa/dsa_gen.c
index 31ce1d49a6b5847c5832ffd4b0acaa02a43ef921..6517b1592d0f31137e6892ba397611399a9c1b6b 100644 (file)
--- a/crypto/dsa/dsa_gen.c
+++ b/crypto/dsa/dsa_gen.c
@@ -203,7 +203,8 @@ int dsa_builtin_paramgen(DSA *ret, size_t bits, size_t qbits,
 
                        if (!seed_len)
                                {
 
                        if (!seed_len)
                                {

-                               RAND_pseudo_bytes(seed, qsize);
+                               if (RAND_pseudo_bytes(seed, qsize) < 0)
+                                       goto err;

                                seed_is_random = 1;
                                }
                        else
                                seed_is_random = 1;
                                }
                        else


@@ -475,7 +476,10 @@ int dsa_builtin_paramgen2(DSA *ret, size_t L, size_t N,
                                goto err;
 
                        if (!seed_in)
                                goto err;
 
                        if (!seed_in)

-                               RAND_pseudo_bytes(seed, seed_len);
+                               {
+                               if (RAND_pseudo_bytes(seed, seed_len) < 0)
+                                       goto err;
+                               }

                        /* step 2 */
                        if (!EVP_Digest(seed, seed_len, md, NULL, evpmd, NULL))
                                goto err;
                        /* step 2 */
                        if (!EVP_Digest(seed, seed_len, md, NULL, evpmd, NULL))
                                goto err;