提交 7634137b 编写于 作者: D Dr. Stephen Henson

Place DRBG in error state if health check fails.

上级 2c472780
...@@ -96,6 +96,7 @@ int FIPS_drbg_init(DRBG_CTX *dctx, int type, unsigned int flags) ...@@ -96,6 +96,7 @@ int FIPS_drbg_init(DRBG_CTX *dctx, int type, unsigned int flags)
if (!fips_drbg_kat(&tctx, type, flags | DRBG_FLAG_TEST)) if (!fips_drbg_kat(&tctx, type, flags | DRBG_FLAG_TEST))
{ {
FIPSerr(FIPS_F_FIPS_DRBG_INIT, FIPS_R_SELFTEST_FAILURE); FIPSerr(FIPS_F_FIPS_DRBG_INIT, FIPS_R_SELFTEST_FAILURE);
dctx->status = DRBG_STATUS_ERROR;
return 0; return 0;
} }
} }
...@@ -333,6 +334,7 @@ static int fips_drbg_check(DRBG_CTX *dctx) ...@@ -333,6 +334,7 @@ static int fips_drbg_check(DRBG_CTX *dctx)
dctx->flags | DRBG_FLAG_TEST)) dctx->flags | DRBG_FLAG_TEST))
{ {
FIPSerr(FIPS_F_FIPS_DRBG_CHECK, FIPS_R_SELFTEST_FAILURE); FIPSerr(FIPS_F_FIPS_DRBG_CHECK, FIPS_R_SELFTEST_FAILURE);
dctx->status = DRBG_STATUS_ERROR;
return 0; return 0;
} }
dctx->health_check_cnt = 0; dctx->health_check_cnt = 0;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册