crypto/ct/ct_log.c: handle negative returns when loading a log store

2026-10-09T20:39:34Z

CTLOG_STORE_load_file() treats a negative CONF_parse_list() return as success, even when the callback failed to allocate the log name. Check for non-positive parser returns so internal errors produce the documented 0 return value, preserving the existing invalid-entry handling. Add a regression using the existing allocation failure framework and a configuration referencing a missing log section. Loading must return 0 both normally and when allocations fail. Return -1 from the test on unexpected success so ADD_MFAIL_NO_CHECK_TEST cannot mask the failure. Resolves: https://github.com/openssl/openssl/issues/32703 References: 70073f3e3aeb "Treat boolean functions as booleans" Complements: 68efafc51378 "Add checks on sk_TYPE_push() returned value" Complements: e57036f2bf81 "Fix some memory error handling in CT" Assisted-by: Codex:gpt-6-astra Reviewed-by: Saša Nedvědický Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Eugene Syromiatnikov Merge-date: Fri Oct 9 20:40:44 2026 Merged-from: https://github.com/openssl/openssl/pull/32704

openssl/test/ct/log_list_missing_section.cnf, branch master

crypto/ct/ct_log.c: handle negative returns when loading a log store