From 7fb9163586234ed9eecf95ae2fd7185a9dcb556e Mon Sep 17 00:00:00 2001 From: Norbert Pocs Date: Sun, 5 Oct 2025 09:39:22 +0200 Subject: [PATCH] Check return code of BIO_ADDR_rawaddress Fixes coverity issue: https://scan5.scan.coverity.com/#/project-view/64471/10222?selectedIssue=1666584 Thank you for the report! Signed-off-by: Norbert Pocs Reviewed-by: Neil Horman Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/28751) --- apps/lib/s_cb.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/lib/s_cb.c b/apps/lib/s_cb.c index 496cb3c6f1..b567b179b6 100644 --- a/apps/lib/s_cb.c +++ b/apps/lib/s_cb.c @@ -894,7 +894,8 @@ int generate_stateless_cookie_callback(SSL *ssl, unsigned char *cookie, buffer = app_malloc(length, "cookie generate buffer"); memcpy(buffer, &port, sizeof(port)); - BIO_ADDR_rawaddress(peer, buffer + sizeof(port), NULL); + if (!BIO_ADDR_rawaddress(peer, buffer + sizeof(port), NULL)) + goto end; if (EVP_Q_mac(NULL, "HMAC", NULL, "SHA1", NULL, cookie_secret, COOKIE_SECRET_LENGTH, buffer, length,