crypto: fix error check on gcry_md_open
authorDaniel P. Berrangé <berrange@redhat.com>
Wed, 30 Oct 2024 10:08:12 +0000 (10:08 +0000)
committerDaniel P. Berrangé <berrange@redhat.com>
Tue, 5 Nov 2024 18:37:18 +0000 (18:37 +0000)
Gcrypt does not return negative values on error, it returns non-zero
values. This caused QEMU not to detect failure to open an unsupported
hash, resulting in a later crash trying to use a NULL context.

Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
crypto/hash-gcrypt.c

index f04a9f553cab1f96493573beb11478a38633ad12..476b7481951bda6c9600ec918d2a1d49b3d645f3 100644 (file)
@@ -52,7 +52,7 @@ static
 QCryptoHash *qcrypto_gcrypt_hash_new(QCryptoHashAlgo alg, Error **errp)
 {
     QCryptoHash *hash;
-    int ret;
+    gcry_error_t ret;
 
     hash = g_new(QCryptoHash, 1);
     hash->alg = alg;
@@ -60,7 +60,7 @@ QCryptoHash *qcrypto_gcrypt_hash_new(QCryptoHashAlgo alg, Error **errp)
 
     ret = gcry_md_open((gcry_md_hd_t *) hash->opaque,
                        qcrypto_hash_alg_map[alg], 0);
-    if (ret < 0) {
+    if (ret != 0) {
         error_setg(errp,
                    "Unable to initialize hash algorithm: %s",
                    gcry_strerror(ret));