Add a return value to aead_t.encrypt()

diff --git a/scripts/crypt_burn.c b/scripts/crypt_burn.c
index 3f7ad5f63e4bc2121b541928388514647bdb071d..3b05144e85459710cf830f8f87a59e7bdff32449 100644 (file)
--- a/scripts/crypt_burn.c
+++ b/scripts/crypt_burn.c
@@ -70,10 +70,14 @@ int main(int argc, char *argv[])
                }
                while (TRUE)
                {
-                       aead->encrypt(aead,
+                       if (!aead->encrypt(aead,
                                chunk_create(buffer, sizeof(buffer) - aead->get_icv_size(aead)),
                                chunk_from_thing(assoc),
-                               chunk_create(iv, aead->get_iv_size(aead)), NULL);
+                               chunk_create(iv, aead->get_iv_size(aead)), NULL))
+                       {
+                               fprintf(stderr, "aead encryption failed!\n");
+                               return 1;
+                       }
                        if (!aead->decrypt(aead, chunk_create(buffer, sizeof(buffer)),
                                chunk_from_thing(assoc),
                                chunk_create(iv, aead->get_iv_size(aead)), NULL))

diff --git a/src/libcharon/encoding/payloads/encryption_payload.c b/src/libcharon/encoding/payloads/encryption_payload.c
index 096079ad7674eddcecde3489e5b8105c3d67f35b..842e516d7a5516ac29a0e61911cfe0f6555ff0e9 100644 (file)
--- a/src/libcharon/encoding/payloads/encryption_payload.c
+++ b/src/libcharon/encoding/payloads/encryption_payload.c
@@ -367,7 +367,11 @@ METHOD(encryption_payload_t, encrypt, bool,
        DBG3(DBG_ENC, "padding %B", &padding);
        DBG3(DBG_ENC, "assoc %B", &assoc);
 
-       this->aead->encrypt(this->aead, crypt, assoc, iv, NULL);
+       if (!this->aead->encrypt(this->aead, crypt, assoc, iv, NULL))
+       {
+               free(assoc.ptr);
+               return FALSE;
+       }
 
        DBG3(DBG_ENC, "encrypted %B", &crypt);
        DBG3(DBG_ENC, "ICV %B", &icv);
@@ -410,7 +414,11 @@ METHOD(encryption_payload_t, encrypt_v1, bool,
        DBG3(DBG_ENC, "plain %B", &plain);
        DBG3(DBG_ENC, "padding %B", &padding);
 
-       this->aead->encrypt(this->aead, this->encrypted, chunk_empty, iv, NULL);
+       if (!this->aead->encrypt(this->aead, this->encrypted, chunk_empty, iv, NULL))
+       {
+               chunk_free(&iv);
+               return FALSE;
+       }
        chunk_free(&iv);
 
        DBG3(DBG_ENC, "encrypted %B", &this->encrypted);

diff --git a/src/libcharon/sa/ikev1/keymat_v1.c b/src/libcharon/sa/ikev1/keymat_v1.c
index 000c73a534538ff199ca971e0d3f0bc93d3edec8..9b566b198ea7d65090c26e3343e1ed45055449eb 100644 (file)
--- a/src/libcharon/sa/ikev1/keymat_v1.c
+++ b/src/libcharon/sa/ikev1/keymat_v1.c
@@ -163,11 +163,12 @@ typedef struct {
 } private_aead_t;
 
 
-METHOD(aead_t, encrypt, void,
+METHOD(aead_t, encrypt, bool,
        private_aead_t *this, chunk_t plain, chunk_t assoc, chunk_t iv,
        chunk_t *encrypted)
 {
        this->crypter->encrypt(this->crypter, plain, iv, encrypted);
+       return TRUE;
 }
 
 METHOD(aead_t, decrypt, bool,

diff --git a/src/libstrongswan/crypto/aead.c b/src/libstrongswan/crypto/aead.c
index 51cb05909a64b73f56d6d169b04b59eeb0532a25..417c0b5aa68d7f772ff11b57e91aa51e7b64860e 100644 (file)
--- a/src/libstrongswan/crypto/aead.c
+++ b/src/libstrongswan/crypto/aead.c
@@ -40,7 +40,7 @@ struct private_aead_t {
        signer_t *signer;
 };
 
-METHOD(aead_t, encrypt, void,
+METHOD(aead_t, encrypt, bool,
        private_aead_t *this, chunk_t plain, chunk_t assoc, chunk_t iv,
        chunk_t *encrypted)
 {
@@ -60,6 +60,7 @@ METHOD(aead_t, encrypt, void,
                this->crypter->encrypt(this->crypter, plain, iv, NULL);
                this->signer->get_signature(this->signer, plain, plain.ptr + plain.len);
        }
+       return TRUE;
 }
 
 METHOD(aead_t, decrypt, bool,

diff --git a/src/libstrongswan/crypto/aead.h b/src/libstrongswan/crypto/aead.h
index 3f6abb4f97e2bc5fbe314daf36c4788cb3c79da5..85361104e360017c6f915ce6863fce604d27136c 100644 (file)
--- a/src/libstrongswan/crypto/aead.h
+++ b/src/libstrongswan/crypto/aead.h
@@ -45,8 +45,10 @@ struct aead_t {
         * @param assoc                 associated data to sign
         * @param iv                    initialization vector
         * @param encrypted             allocated encryption result
+        * @return                              TRUE if successfully encrypted
         */
-       void (*encrypt)(aead_t *this, chunk_t plain, chunk_t assoc, chunk_t iv,
+       __attribute__((warn_unused_result))
+       bool (*encrypt)(aead_t *this, chunk_t plain, chunk_t assoc, chunk_t iv,
                                        chunk_t *encrypted);
 
        /**

diff --git a/src/libstrongswan/crypto/crypto_tester.c b/src/libstrongswan/crypto/crypto_tester.c
index 961957056d0537111f69ed94bdc517ac5a8aeaa3..7ee1a7ab3f650997fa525c115d460b2ee0c40321 100644 (file)
--- a/src/libstrongswan/crypto/crypto_tester.c
+++ b/src/libstrongswan/crypto/crypto_tester.c
@@ -317,12 +317,16 @@ static u_int bench_aead(private_crypto_tester_t *this,
                start_timing(&start);
                while (end_timing(&start) < this->bench_time)
                {
-                       aead->encrypt(aead, buf, chunk_from_thing(assoc),
-                                                 chunk_from_thing(iv), NULL);
-                       runs += 2;
-                       aead->decrypt(aead, chunk_create(buf.ptr, buf.len + icv),
-                                                 chunk_from_thing(assoc), chunk_from_thing(iv), NULL);
-                       runs += 2;
+                       if (aead->encrypt(aead, buf, chunk_from_thing(assoc),
+                                               chunk_from_thing(iv), NULL))
+                       {
+                               runs += 2;
+                       }
+                       if (aead->decrypt(aead, chunk_create(buf.ptr, buf.len + icv),
+                                               chunk_from_thing(assoc), chunk_from_thing(iv), NULL))
+                       {
+                               runs += 2;
+                       }
                }
                free(buf.ptr);
                aead->destroy(aead);
@@ -377,7 +381,10 @@ METHOD(crypto_tester_t, test_aead, bool,
 
                /* allocated encryption */
                plain = chunk_create(vector->plain, vector->len);
-               aead->encrypt(aead, plain, assoc, iv, &cipher);
+               if (!aead->encrypt(aead, plain, assoc, iv, &cipher))
+               {
+                       failed = TRUE;
+               }
                if (!memeq(vector->cipher, cipher.ptr, cipher.len))
                {
                        failed = TRUE;
@@ -405,7 +412,10 @@ METHOD(crypto_tester_t, test_aead, bool,
                }
                plain.ptr = realloc(plain.ptr, plain.len + icv);
                /* inline encryption */
-               aead->encrypt(aead, plain, assoc, iv, NULL);
+               if (!aead->encrypt(aead, plain, assoc, iv, NULL))
+               {
+                       failed = TRUE;
+               }
                if (!memeq(vector->cipher, plain.ptr, plain.len + icv))
                {
                        failed = TRUE;

diff --git a/src/libstrongswan/plugins/ccm/ccm_aead.c b/src/libstrongswan/plugins/ccm/ccm_aead.c
index 0d2a56a49d0430513c4a5e64c8caa0918db8e62f..f03440fd45372581627fd1d8bfda36a7faa8177a 100644 (file)
--- a/src/libstrongswan/plugins/ccm/ccm_aead.c
+++ b/src/libstrongswan/plugins/ccm/ccm_aead.c
@@ -240,7 +240,7 @@ static bool verify_icv(private_ccm_aead_t *this, chunk_t plain, chunk_t assoc,
        return memeq(buf, icv, this->icv_size);
 }
 
-METHOD(aead_t, encrypt, void,
+METHOD(aead_t, encrypt, bool,
        private_ccm_aead_t *this, chunk_t plain, chunk_t assoc, chunk_t iv,
        chunk_t *encrypted)
 {
@@ -255,6 +255,7 @@ METHOD(aead_t, encrypt, void,
                create_icv(this, plain, assoc, iv, plain.ptr + plain.len);
                crypt_data(this, iv, plain, plain);
        }
+       return TRUE;
 }
 
 METHOD(aead_t, decrypt, bool,

diff --git a/src/libstrongswan/plugins/gcm/gcm_aead.c b/src/libstrongswan/plugins/gcm/gcm_aead.c
index 0d7d91dbfde065a47b2c076c7c4a2aa721eae492..8552f5cbc01c85e5ca8171f9a74e14f3ebfc603d 100644 (file)
--- a/src/libstrongswan/plugins/gcm/gcm_aead.c
+++ b/src/libstrongswan/plugins/gcm/gcm_aead.c
@@ -267,7 +267,7 @@ static bool verify_icv(private_gcm_aead_t *this, chunk_t assoc, chunk_t crypt,
        return memeq(tmp, icv, this->icv_size);
 }
 
-METHOD(aead_t, encrypt, void,
+METHOD(aead_t, encrypt, bool,
        private_gcm_aead_t *this, chunk_t plain, chunk_t assoc, chunk_t iv,
        chunk_t *encrypted)
 {
@@ -288,6 +288,7 @@ METHOD(aead_t, encrypt, void,
                crypt(this, j, plain, plain);
                create_icv(this, assoc, plain, j, plain.ptr + plain.len);
        }
+       return TRUE;
 }
 
 METHOD(aead_t, decrypt, bool,