crypto: add mode check in qcrypto_cipher_new() for cipher-builtin

Signed-off-by: Gonglei <[email protected]> Signed-off-by: Daniel P. Berrange <[email protected]>
zhoulunhao · Oct 19, 2016 · 77cf26c · 77cf26c
1 parent 3c28292
commit 77cf26c
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/crypto/cipher-builtin.c b/crypto/cipher-builtin.c
@@ -433,6 +433,17 @@ QCryptoCipher *qcrypto_cipher_new(QCryptoCipherAlgorithm alg,
 {
     QCryptoCipher *cipher;
 
+    switch (mode) {
+    case QCRYPTO_CIPHER_MODE_ECB:
+    case QCRYPTO_CIPHER_MODE_CBC:
+    case QCRYPTO_CIPHER_MODE_XTS:
+        break;
+    default:
+        error_setg(errp, "Unsupported cipher mode %s",
+                   QCryptoCipherMode_lookup[mode]);
+        return NULL;
+    }
+
     cipher = g_new0(QCryptoCipher, 1);
     cipher->alg = alg;
     cipher->mode = mode;