var-expand-crypt: Ensure iv or salt is given in raw mode

Would generate non-decryptable output otherwise.

diff --git a/src/plugins/var-expand-crypt/var-expand-crypt-plugin.c b/src/plugins/var-expand-crypt/var-expand-crypt-plugin.c
index d864edcbc09885116336076f5263fceff8e28a1c..88f4888359072dc653bfcefe02bba621b01e31bf 100644 (file)
--- a/src/plugins/var-expand-crypt/var-expand-crypt-plugin.c
+++ b/src/plugins/var-expand-crypt/var-expand-crypt-plugin.c
@@ -201,6 +201,9 @@ static int var_expand_crypt_settings(struct var_expand_state *state,
                        return -1;
                } else if (parse_parameters(ctx, parts, error_r) < 0)
                        return -1;
+       } else if (ctx->raw && ctx->iv == NULL && ctx->salt == NULL) {
+               *error_r = "In raw format, salt or IV must be given";
+               return -1;
        }
 
        if (ctx->iv == NULL) {