Add checks to the return value of EVP_Cipher to prevent silent encryption failure.

[openssl.git] / ssl / s3_pkt.c

diff --git a/ssl/s3_pkt.c b/ssl/s3_pkt.c
index ea45b8650f2e9423d2f598f7ff775dede105251b..8fedf5a80d7c64e4815dd1706f9cf7c039abaedb 100644 (file)
--- a/ssl/s3_pkt.c
+++ b/ssl/s3_pkt.c
@@ -1118,8 +1118,7 @@ static int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
                wr->length += eivlen;
                }
 
                wr->length += eivlen;
                }
 

-       /* ssl3_enc can only have an error on read */
-       s->method->ssl3_enc->enc(s,1);
+       if(s->method->ssl3_enc->enc(s,1)<1) goto err;

 
        if (SSL_USE_ETM(s) && mac_size != 0)
                {
 
        if (SSL_USE_ETM(s) && mac_size != 0)
                {