Check gnutls_hmac() return value

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
sailfishos-mirror · Feb 28, 2015 · cb84498 · cb84498
1 parent fa4ee64
commit cb84498
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/gnutls-esp.c b/gnutls-esp.c
@@ -140,7 +140,13 @@ int decrypt_esp_packet(struct openconnect_info *vpninfo, struct esp *esp, struct
 	unsigned char hmac_buf[20];
 	int err;
 
-	gnutls_hmac(esp->hmac, &pkt->esp, sizeof(pkt->esp) + pkt->len);
+	err = gnutls_hmac(esp->hmac, &pkt->esp, sizeof(pkt->esp) + pkt->len);
+	if (err) {
+		vpn_progress(vpninfo, PRG_ERR,
+			     _("Failed to calculate HMAC for ESP packet: %s\n"),
+			     gnutls_strerror(err));
+		return -EIO;
+	}
 	gnutls_hmac_output(esp->hmac, hmac_buf);
 	if (memcmp(hmac_buf, pkt->data + pkt->len, 12)) {
 		vpn_progress(vpninfo, PRG_DEBUG,