Merge pull request #12667 from boomer41/fix-devicekey

Add check for return code in DeviceKey to avoid injecting invalid ROT

Author: 0xc0170

features/device_key/source/DeviceKey.cpp

@@ -269,7 +269,10 @@ int DeviceKey::generate_root_of_trust()
 
     mbedtls_entropy_free(entropy);
     delete entropy;
-    ret = device_inject_root_of_trust(key_buff, actual_size);
+
+    if (ret == DEVICEKEY_SUCCESS) {
+        ret = device_inject_root_of_trust(key_buff, actual_size);
+    }
 #endif
 
     return ret;