From fa33b61102ee090f8420935b135661a70c1f7316 Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Mon, 28 Oct 2019 14:20:39 +0100 Subject: [PATCH] SSH-01-006: Add missing NULL check in ssh_packet_hmac_verify() Fixes T193 Signed-off-by: Andreas Schneider Reviewed-by: Jakub Jelen (cherry picked from commit 69daa602b80da009413ca9e91703d6922130013d) --- src/packet_crypt.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/packet_crypt.c b/src/packet_crypt.c index 18df9dcb..168fcc72 100644 --- a/src/packet_crypt.c +++ b/src/packet_crypt.c @@ -255,6 +255,10 @@ int ssh_packet_hmac_verify(ssh_session session, } crypto = ssh_packet_get_current_crypto(session, SSH_DIRECTION_IN); + if (crypto == NULL) { + return SSH_ERROR; + } + ctx = hmac_init(crypto->decryptMAC, hmac_digest_len(type), type); if (ctx == NULL) { return -1;