[openssl-dev] [openssl.org #4027] Return value in dh_pmeth.c

[Salz, Rich via RT]

A non-matching kdf_type moves from return 1 to return 0 if NO_CMS compiles out the KDF_X9_42 change - that is a different error return and that seems incorrect to be making that change as part of handling conditional compilation additions.
Although it looks like that change is one that should be made - and attention drawn to it - in that returning 1 == success for this function and not deriving anything because you don't know or support the kdf type should return an error condition (<= 0 for this function).

_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod