diff --git a/wolfcrypt/src/aes.c b/wolfcrypt/src/aes.c index e89dba5e1..e788c5694 100644 --- a/wolfcrypt/src/aes.c +++ b/wolfcrypt/src/aes.c @@ -7883,8 +7883,8 @@ int wc_AesCcmEncrypt(Aes* aes, byte* out, const byte* in, word32 inSz, const word32 wordSz = (word32)sizeof(word32); /* sanity check on arguments */ - if (aes == NULL || (inSz != 0 && (in == NULL || out == NULL)) || nonce == NULL - || authTag == NULL || nonceSz < 7 || nonceSz > 13 || + if (aes == NULL || (inSz != 0 && (in == NULL || out == NULL)) || + nonce == NULL || authTag == NULL || nonceSz < 7 || nonceSz > 13 || authTagSz > AES_BLOCK_SIZE) return BAD_FUNC_ARG;