From 702bcb86844e30e1f663ac3c998058466adcc273 Mon Sep 17 00:00:00 2001
From: Milan Broz <gmazyland@gmail.com>
Date: Tue, 17 Oct 2017 10:37:17 +0200
Subject: [PATCH] Fail if integrity option is used with LUKS1 format.

---
 src/cryptsetup.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/cryptsetup.c b/src/cryptsetup.c
index 9cbf827b..bc7f0385 100644
--- a/src/cryptsetup.c
+++ b/src/cryptsetup.c
@@ -999,7 +999,10 @@ static int action_luksFormat(void)
 		goto out;
 	}
 
-	if (luks_version == 2 && opt_integrity) {
+	if (luks_version != 2 && opt_integrity) {
+		log_err(_("Integrity option can be used only for LUKS2 format.\n"));
+		goto out;
+	} if (opt_integrity) {
 		r = crypt_parse_integrity_mode(opt_integrity, integrity, &integrity_keysize);
 		if (r < 0) {
 			log_err(_("No known integrity specification pattern detected.\n"));