jwt-openssl: Check error on EVP_DigestSign()

Signed-off-by: Ben Collins <[email protected]>
benmcollins · Dec 3, 2024 · e0cae65 · e0cae65
1 parent 0e83b08
commit e0cae65
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/libjwt/jwt-openssl.c b/libjwt/jwt-openssl.c
@@ -328,15 +328,17 @@ int jwt_sign_sha_pem(jwt_t *jwt, char **out, unsigned int *len,
 	}
 
 	/* Get the size of sig first */
-	EVP_DigestSign(mdctx, NULL, &slen, (const unsigned char *)str, str_len);
+	if (EVP_DigestSign(mdctx, NULL, &slen, (const unsigned char *)str, str_len) != 1)
+		SIGN_ERROR(EINVAL);
 
 	/* Allocate memory for signature based on returned size */
-        sig = alloca(slen);
+	sig = alloca(slen);
 	if (sig == NULL)
 		SIGN_ERROR(ENOMEM);
 
 	/* Actual signing */
-	EVP_DigestSign(mdctx, sig, &slen, (const unsigned char *)str, str_len);
+	if (EVP_DigestSign(mdctx, sig, &slen, (const unsigned char *)str, str_len) != 1)
+		SIGN_ERROR(EINVAL);
 
 	if (type != EVP_PKEY_EC) {
 		*out = jwt_malloc(slen);