When only the key is given to "enc", the IV is undefined

(found by Andy Brown <logic@warthog.com>).

1 files changed, 8 insertions, 0 deletions

diff --git a/apps/enc.c b/apps/enc.c
index 2101b4cc64..ef0e872ffe 100644
--- a/apps/enc.c
+++ b/apps/enc.c
@@ -515,6 +515,14 @@ bad:
 			BIO_printf(bio_err,"invalid hex iv value\n");
 			goto end;
 			}
+		if ((hiv == NULL) && (str == NULL))
+			{
+			/* No IV was explicitly set and no IV was generated
+			 * during EVP_BytesToKey. Hence the IV is undefined,
+			 * making correct decryption impossible. */
+			BIO_printf(bio_err, "iv undefined\n");
+			goto end;
+			}
 		if ((hkey != NULL) && !set_hex(hkey,key,24))
 			{
 			BIO_printf(bio_err,"invalid hex key value\n");