From 3fd2647383318d5ca0c4ec3ef99119c863c51528 Mon Sep 17 00:00:00 2001
From: Guido Vranken <guidovranken@gmail.com>
Date: Sat, 6 Feb 2021 08:15:30 +0100
Subject: [PATCH] SHA 256,512: Only write hash if no error has occurred

ZD 11649
---
 wolfcrypt/src/sha256.c | 2 +-
 wolfcrypt/src/sha512.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/wolfcrypt/src/sha256.c b/wolfcrypt/src/sha256.c
index e610d5413..50b8cf60f 100644
--- a/wolfcrypt/src/sha256.c
+++ b/wolfcrypt/src/sha256.c
@@ -1094,7 +1094,7 @@ static int InitSha256(wc_Sha256* sha256)
     #endif
 
         /* save remainder */
-        if (len > 0) {
+        if (ret == 0 && len > 0) {
             XMEMCPY(local, data, len);
             sha256->buffLen = len;
         }
diff --git a/wolfcrypt/src/sha512.c b/wolfcrypt/src/sha512.c
index 1a4483278..ef09e5404 100644
--- a/wolfcrypt/src/sha512.c
+++ b/wolfcrypt/src/sha512.c
@@ -717,7 +717,7 @@ static WC_INLINE int Sha512Update(wc_Sha512* sha512, const byte* data, word32 le
     }
 #endif
 
-    if (len > 0) {
+    if (ret == 0 && len > 0) {
         XMEMCPY(local, data, len);
         sha512->buffLen = len;
     }