mirror of
https://github.com/opnsense/src.git
synced 2026-06-14 19:20:18 -04:00
padlock(4) doesn't support explicitly provided keys yet.
Return an error instead of encrypting/decrypting data with a wrong key.
This commit is contained in:
parent
bd6b0820f8
commit
eb340a613c
1 changed files with 4 additions and 0 deletions
|
|
@ -366,6 +366,10 @@ padlock_process(void *arg __unused, struct cryptop *crp, int hint __unused)
|
|||
err = EINVAL;
|
||||
goto out;
|
||||
}
|
||||
if ((crd->crd_flags & CRD_F_KEY_EXPLICIT) != 0) {
|
||||
err = EINVAL;
|
||||
goto out;
|
||||
}
|
||||
|
||||
mtx_lock(&sc->sc_sessions_mtx);
|
||||
TAILQ_FOREACH(ses, &sc->sc_sessions, ses_next) {
|
||||
|
|
|
|||
Loading…
Reference in a new issue