From 7b8bc4ba5169fd23996e52c73c02e7a800a97d50 Mon Sep 17 00:00:00 2001 From: tb Date: Tue, 9 Jun 2026 05:17:24 +0000 Subject: [PATCH] ssl_kex: ensure decode_error alert is raised --- regress/lib/libssl/unit/ssl_kex.c | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/regress/lib/libssl/unit/ssl_kex.c b/regress/lib/libssl/unit/ssl_kex.c index 0fc15033c09..8b4f644a412 100644 --- a/regress/lib/libssl/unit/ssl_kex.c +++ b/regress/lib/libssl/unit/ssl_kex.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssl_kex.c,v 1.2 2026/06/08 11:41:21 tb Exp $ */ +/* $OpenBSD: ssl_kex.c,v 1.3 2026/06/09 05:17:24 tb Exp $ */ /* * Copyright (c) 2026 Theo Buehler @@ -121,6 +121,10 @@ ssl_key_share_ecdhe_test(void) fprintf(stderr, "FAIL: parsed point at infinity\n"); failed |= 1; } + if (!decode_error) { + fprintf(stderr, "FAIL: no decode_error for point at infinity\n"); + failed |= 1; + } EC_KEY_free(ecdh_peer); ecdh_peer = NULL; @@ -133,6 +137,10 @@ ssl_key_share_ecdhe_test(void) fprintf(stderr, "FAIL: parsed compressed P-384 point\n"); failed |= 1; } + if (!decode_error) { + fprintf(stderr, "FAIL: no decode_error for compressed P-384 point\n"); + failed |= 1; + } EC_KEY_free(ecdh_peer); ecdh_peer = NULL; @@ -145,6 +153,10 @@ ssl_key_share_ecdhe_test(void) fprintf(stderr, "FAIL: parsed hybrid P-384 point\n"); failed |= 1; } + if (!decode_error) { + fprintf(stderr, "FAIL: no decode_error for hybrid P-384 point\n"); + failed |= 1; + } EC_KEY_free(ecdh_peer); ecdh_peer = NULL;