* src/ne_openssl.c (ne_vstrhash): Check flags field.

* test/string-tests.c (test_vstrhash, strhash): Test ne_vstrhash()
  invalid flags handling.

2 files changed, 16 insertions, 0 deletions

diff --git a/src/ne_openssl.c b/src/ne_openssl.c
index 8907568..73fc29f 100644
--- a/src/ne_openssl.c
+++ b/src/ne_openssl.c
@@ -1148,6 +1148,8 @@ char *ne_vstrhash(unsigned int flags, va_list ap)
     char ret[33];
     const char *arg;
 
+    if (flags != NE_STRHASH_MD5) return NULL;
+
     md = EVP_md5();
 
     if (EVP_DigestInit(ctx, md) != 1) return NULL;
diff --git a/test/string-tests.c b/test/string-tests.c
index 68fac46..a0975e7 100644
--- a/test/string-tests.c
+++ b/test/string-tests.c
@@ -650,11 +650,25 @@ static int qappend(void)
     return OK;
 }
 
+static char *test_vstrhash(unsigned int flags, ...)
+{
+    va_list ap;
+    char *rv;
+
+    va_start(ap, flags);
+    rv = ne_vstrhash(flags, ap);
+    va_end(ap);
+
+    return rv;
+}
+
 static int strhash(void)
 {
     char *h;
 
     ONN("zero flags must return NULL", ne_strhash(0, "", NULL) != NULL);
+
+    ONN("zero flags must return NULL for vstrhash", test_vstrhash(0, "", NULL) != NULL);
     
     h = ne_strhash(NE_STRHASH_MD5, "", NULL);
     ONCMP(h, "d41d8cd98f00b204e9800998ecf8427e");