commit 385cb8c4d6766b36c52c3bf89128f5a16c88c395
author Paul Crowley <paulcrowley@google.com> Thu Mar 29 13:27:23 2018 -0700
committer Paul Crowley <paulcrowley@google.com> Thu Mar 29 13:39:21 2018 -0700
tree adc06449713db126a097db4b27bd4d1378e28f28
parent eb850f93ab056c05cd949ada794c4dab42027a3c

Gate use of allow_encrypt_override behind ro.crypto property

Test: use adb set-virtual-disk to create a virtual partition
Bug: 25861755
Change-Id: I6a227a083c82321c8d4d2d9188091a6f7f0451f0

cryptfs.cpp

diff --git a/cryptfs.cpp b/cryptfs.cpp
index 09e67af..2ab3d09 100644
--- a/cryptfs.cpp
+++ b/cryptfs.cpp
@@ -1900,10 +1900,12 @@
     ext_crypt_ftr.keysize = cryptfs_get_keysize();
     strlcpy((char*) ext_crypt_ftr.crypto_type_name, cryptfs_get_crypto_name(),
             MAX_CRYPTO_TYPE_NAME_LEN);
+    uint32_t flags = 0;
+    if (e4crypt_is_native() &&
+        android::base::GetBoolProperty("ro.crypto.allow_encrypt_override", false))
+        flags |= CREATE_CRYPTO_BLK_DEV_FLAGS_ALLOW_ENCRYPT_OVERRIDE;
 
-    return create_crypto_blk_dev(
-        &ext_crypt_ftr, key, real_blkdev, out_crypto_blkdev, label,
-        e4crypt_is_native() ? CREATE_CRYPTO_BLK_DEV_FLAGS_ALLOW_ENCRYPT_OVERRIDE : 0);
+    return create_crypto_blk_dev(&ext_crypt_ftr, key, real_blkdev, out_crypto_blkdev, label, flags);
 }
 
 /*