Check for incorrect digest type during sign

Change-Id: I24d8e7f4a2b7f6fd0f8dd52799263e3feb9f9de9

diff --git a/src/backend/hal_backend_security_certs.cpp b/src/backend/hal_backend_security_certs.cpp
index 8007e1fd2546f7017b04e96f7d9283af37d72643..e4dc66b714beb90e0cbcd939f075544d7ef8504e 100644 (file)
--- a/src/backend/hal_backend_security_certs.cpp
+++ b/src/backend/hal_backend_security_certs.cpp
@@ -196,7 +196,13 @@ int hal_backend_security_certs::sign_data(hal_security_certs_digest_type_e diges
                }
        }
 
-       if (1 != EVP_PKEY_CTX_set_signature_md(ctx.get(), to_openssl_md_type(digest_type))) {
+       auto md_type = to_openssl_md_type(digest_type);
+       if (!md_type) {
+               LOGE("Unsupported digest type");
+               return -ENODATA;
+       }
+
+       if (1 != EVP_PKEY_CTX_set_signature_md(ctx.get(), md_type)) {
                LOGE("Can't set signature digest");
                return -EINVAL;
        }