crypto/x509-utils: fix gnutls error code in crt_init failure path

qcrypto_get_x509_cert_fingerprint() reports gnutls_strerror(ret) when
gnutls_x509_crt_init() fails, but ret is still the initial value -1.
Store the gnutls return code before formatting the error, matching
other gnutls call sites in the tree.

Fixes: 2183ab6251 ("crypto/x509-utils: Check for error from gnutls_x509_crt_init()")
Signed-off-by: yujun <yujun@kylinos.cn>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Message-ID: <20260629111026.281185-1-yujun@kylinos.cn>
Signed-off-by: Philippe Mathieu-Daudé <philmd@oss.qualcomm.com>
This commit is contained in:
yujun
2026-06-29 19:10:26 +08:00
committed by Philippe Mathieu-Daudé
parent 4c883aee49
commit d517d26da4

View File

@@ -46,7 +46,8 @@ int qcrypto_get_x509_cert_fingerprint(uint8_t *cert, size_t size,
return -1; return -1;
} }
if (gnutls_x509_crt_init(&crt) < 0) { ret = gnutls_x509_crt_init(&crt);
if (ret < 0) {
error_setg(errp, "Unable to initialize certificate: %s", error_setg(errp, "Unable to initialize certificate: %s",
gnutls_strerror(ret)); gnutls_strerror(ret));
return -1; return -1;