eessppeelllloo/cryptsetup
1
0
Fork 0
mirror of https://gitlab.com/cryptsetup/cryptsetup.git synced 2025-12-05 16:00:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

Harden LUKS2 decryption with datashift parameters.

Browse Source 
Abort early if detached header is passed in API
by any chance.
This commit is contained in:
Ondrej Kozina
2022-06-27 15:14:14 +02:00
parent 24d498e393
commit 0ffd105cb8
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/luks2/luks2_reencrypt.c
View File

@@ -2734,8 +2734,12 @@ static int reencrypt_decrypt_with_datashift_init(struct crypt_device *cd,
assert(hdr); assert(hdr);
assert(params); assert(params);
assert(params->resilience); assert(params->resilience);
assert(params->data_shift);
assert(vks); assert(vks);
if (!data_offset)
return -EINVAL;
if (params->max_hotzone_size > params->data_shift) { if (params->max_hotzone_size > params->data_shift) {
log_err(cd, _("Moved segment size can not be greater than data shift value.")); log_err(cd, _("Moved segment size can not be greater than data shift value."));
return -EINVAL; return -EINVAL;