check result of cek = cjose_get_alloc()(cek_len) in jwe.c

see: cisco#110 Signed-off-by: Hans Zandbelt <[email protected]>
OpenIDC · Apr 5, 2022 · 54d4494 · 54d4494
1 parent cca0a2d
commit 54d4494
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/jwe.c b/src/jwe.c
@@ -2064,6 +2064,10 @@ uint8_t *cjose_jwe_decrypt_multi(cjose_jwe_t *jwe, cjose_key_locator key_locator
         {
             cek_len = jwe->cek_len;
             cek = cjose_get_alloc()(cek_len);
+            if (!cek) {
+               CJOSE_ERROR(err, CJOSE_ERR_NO_MEMORY);
+               return NULL;
+            }
             memcpy(cek, jwe->cek, cek_len);
         }
         else