shaba/systemd-stable
1
1
Fork 0
mirror of https://github.com/systemd/systemd-stable.git synced 2025-01-13 13:17:43 +03:00
Code

creds-util: refuse unexpected key types explicitly

Browse Source
This commit is contained in:
Lennart Poettering 2022-04-14 15:26:02 +02:00
parent b9b156ea3c
commit 7cac4a2e2d
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/shared/creds-util.c
View File

@ -483,6 +483,13 @@ int encrypt_credential_and_warn(
assert(ret);
assert(ret_size);
if (!sd_id128_in_set(with_key,
SD_ID128_NULL,
CRED_AES256_GCM_BY_HOST,
CRED_AES256_GCM_BY_TPM2_HMAC,
CRED_AES256_GCM_BY_HOST_AND_TPM2_HMAC))
return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Invalid key type: " SD_ID128_FORMAT_STR, SD_ID128_FORMAT_VAL(with_key));
if (name && !credential_name_valid(name))
return log_error_errno(SYNTHETIC_ERRNO(EINVAL), "Invalid credential name: %s", name);