commit 534d0b44847967fa82c2a25f2d87cfdc853d504b
author Paul Elliott <paul.elliott@arm.com> Tue Jun 22 19:15:20 2021 +0100
committer Paul Elliott <paul.elliott@arm.com> Tue Jun 22 22:14:48 2021 +0100
tree e8bf0217d3785b50054a68b35ff1243d10201103
parent f88a565f183a8f24feff070115f46f1100e6971c

Finish / Verify state checks

Ensure finish only called when encrypting and verify only called for
decrypting, and add tests to ensure this.

Signed-off-by: Paul Elliott <paul.elliott@arm.com>

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 7a7238c..c1071b0 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -3780,7 +3780,7 @@
         goto exit;
     }
 
-    if( !operation->nonce_set )
+    if( !operation->nonce_set || operation->is_encrypt == 0 )
     {
         status = PSA_ERROR_BAD_STATE;
         goto exit;
@@ -3829,7 +3829,7 @@
         goto exit;
     }
 
-    if( !operation->nonce_set )
+    if( !operation->nonce_set || operation->is_encrypt == 1 )
     {
         status = PSA_ERROR_BAD_STATE;
         goto exit;