[PATCH bpf-next v6 4/8] bpftool: Check EVP_Digest when computing excl_prog_hash

[Quentin Monnet]

On 08/07/2026 08:53, Daniel Borkmann wrote:
> bpftool_prog_sign() ignores the return value of EVP_Digest(). If the
> digest computation fails (context allocation failure, or a digest
> fetch failure under OpenSSL), EVP_Digest() returns 0 and leaves the
> output buffer untouched, but the function still reports success.
> 
> Fixes: 40863f4d6ef2 ("bpftool: Add support for signing BPF programs")
> Signed-off-by: Daniel Borkmann <daniel at iogearbox.net>


Bpftool changes look good to me, thanks for the fix.

Reviewed-by: Quentin Monnet <qmo at kernel.org>