From: Jakub Wlostowski <j.wlostowski@samsung.com>
Date: Wed, 21 May 2025 09:55:51 +0000 (+0200)
Subject: Check for incorrect digest type during sign
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;ds=sidebyside;p=platform%2Fhal%2Fbackend%2Femulator%2Fsecurity-certs.git

Check for incorrect digest type during sign

Change-Id: I24d8e7f4a2b7f6fd0f8dd52799263e3feb9f9de9
---

diff --git a/src/backend/hal_backend_security_certs.cpp b/src/backend/hal_backend_security_certs.cpp
index 8007e1f..e4dc66b 100644
--- a/src/backend/hal_backend_security_certs.cpp
+++ b/src/backend/hal_backend_security_certs.cpp
@@ -196,7 +196,13 @@ int hal_backend_security_certs::sign_data(hal_security_certs_digest_type_e diges
 		}
 	}
 
-	if (1 != EVP_PKEY_CTX_set_signature_md(ctx.get(), to_openssl_md_type(digest_type))) {
+	auto md_type = to_openssl_md_type(digest_type);
+	if (!md_type) {
+		LOGE("Unsupported digest type");
+		return -ENODATA;
+	}
+
+	if (1 != EVP_PKEY_CTX_set_signature_md(ctx.get(), md_type)) {
 		LOGE("Can't set signature digest");
 		return -EINVAL;
 	}