wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 19:20:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #10125 from kareem-wolfssl/zd21521

Browse Source 
Add sz check to ChachaAEADDecrypt to prevent potential underflow.
This commit is contained in:
Daniel Pouzzner
2026-04-06 18:23:25 -05:00
committed by GitHub
parent 53a3d23ce6 5b6b138964
commit 4924402051
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/internal.c
+6 -1
View File
@@ -20014,10 +20014,15 @@ int ChachaAEADDecrypt(WOLFSSL* ssl, byte* plain, const byte* input,
byte tag[POLY1305_AUTH_SZ];
byte poly[CHACHA20_256_KEY_SIZE]; /* generated key for mac */
int ret = 0;
int msgLen = (sz - ssl->specs.aead_mac_size);
int msgLen = 0;
Keys* keys = &ssl->keys;
byte* seq = NULL;
if (sz < ssl->specs.aead_mac_size) {
return BAD_FUNC_ARG;
}
msgLen = (sz - ssl->specs.aead_mac_size);
#ifdef CHACHA_AEAD_TEST
int i;
printf("input before decrypt :\n");