From: Gonglei <arei.gonglei@huawei.com>
Date: Mon, 26 Sep 2016 09:23:23 +0000 (+0800)
Subject: crypto: add mode check in qcrypto_cipher_new() for cipher-builtin
X-Git-Tag: qemu-xen-4.9.0-rc1~129^2~3
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=77cf26cd89c6e6947fe856a079061cebaecd5435;p=qemu-xen.git

crypto: add mode check in qcrypto_cipher_new() for cipher-builtin

Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
---

diff --git a/crypto/cipher-builtin.c b/crypto/cipher-builtin.c
index fd59a9e461..b4bc2b9ca6 100644
--- a/crypto/cipher-builtin.c
+++ b/crypto/cipher-builtin.c
@@ -433,6 +433,17 @@ QCryptoCipher *qcrypto_cipher_new(QCryptoCipherAlgorithm alg,
 {
     QCryptoCipher *cipher;
 
+    switch (mode) {
+    case QCRYPTO_CIPHER_MODE_ECB:
+    case QCRYPTO_CIPHER_MODE_CBC:
+    case QCRYPTO_CIPHER_MODE_XTS:
+        break;
+    default:
+        error_setg(errp, "Unsupported cipher mode %s",
+                   QCryptoCipherMode_lookup[mode]);
+        return NULL;
+    }
+
     cipher = g_new0(QCryptoCipher, 1);
     cipher->alg = alg;
     cipher->mode = mode;