This code path can be triggered if someone inadvertedly swaps the key
with the certificate in the evmctl command line. Our `x` variable would
be NULL, and we need to abort further processing of the certificate.
Signed-off-by: Alberto Mardegan <a.mardegan@xxxxxx>
---
src/libimaevm.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/libimaevm.c b/src/libimaevm.c
index c09ed98..5b22462 100644
--- a/src/libimaevm.c
+++ b/src/libimaevm.c
@@ -923,6 +923,7 @@ static int read_keyid_from_cert(uint32_t *keyid_be, const char *certfile, int tr
ERR_print_errors_fp(stderr);
log_err("read keyid: %s: Error reading x509 certificate\n",
certfile);
+ return -1;
}
if (!(skid = x509_get_skid(x, &skid_len))) {
--
2.34.1
