[WebCrypto] Throw syntaxError if keyUsage is empty in ImportKey

content/child/webcrypto/nss/hmac_nss.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <cryptohi.h>
 #include <pk11pub.h>
 #include <secerr.h>
 #include <sechash.h>
 
 #include "base/logging.h"
@@ skipping 80 matching lines @@
       default:
         return Status::ErrorUnsupportedImportKeyFormat();
     }
   }
 
   Status ImportKeyRaw(const CryptoData& key_data,
                       const blink::WebCryptoAlgorithm& algorithm,
                       bool extractable,
                       blink::WebCryptoKeyUsageMask usages,
                       blink::WebCryptoKey* key) const override {
+    if (usages == 0)
+      return Status::ErrorImportKeyEmptyUsages();
+
     const blink::WebCryptoAlgorithm& hash =
         algorithm.hmacImportParams()->hash();
 
     CK_MECHANISM_TYPE mechanism = CKM_INVALID_MECHANISM;
     if (!WebCryptoHashToHMACMechanism(hash, &mechanism))
       return Status::ErrorUnsupported();
 
     base::CheckedNumeric<unsigned int> keylen_bits(key_data.byte_length());
     keylen_bits *= 8;
 
     if (!keylen_bits.IsValid())
       return Status::ErrorDataTooLarge();
 
     return ImportKeyRawNss(key_data, blink::WebCryptoKeyAlgorithm::createHmac(
                                          hash.id(), keylen_bits.ValueOrDie()),
                            extractable, usages, mechanism,
                            CKF_SIGN | CKF_VERIFY, key);
   }
 
   Status ImportKeyJwk(const CryptoData& key_data,
                       const blink::WebCryptoAlgorithm& algorithm,
                       bool extractable,
                       blink::WebCryptoKeyUsageMask usages,
                       blink::WebCryptoKey* key) const override {
+    if (usages == 0)
+      return Status::ErrorImportKeyEmptyUsages();
+
     const char* algorithm_name =
         GetJwkHmacAlgorithmName(algorithm.hmacImportParams()->hash().id());
     if (!algorithm_name)
       return Status::ErrorUnexpected();
 
     std::vector<uint8_t> raw_data;
     Status status = ReadSecretKeyJwk(key_data, algorithm_name, extractable,
                                      usages, &raw_data);
     if (status.IsError())
       return status;
@@ skipping 101 matching lines @@
 
 }  // namespace
 
 AlgorithmImplementation* CreatePlatformHmacImplementation() {
   return new HmacImplementation;
 }
 
 }  // namespace webcrypto
 
 }  // namespace content