wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 04:20:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

AES: tighten AEAD input validation

Browse Source
This commit is contained in:
Jeremiah Mackey
2026-04-20 17:20:54 +00:00
parent 6596419cb0
commit 4a103a1b4e
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/aes.c
+9 -4
View File
@@ -10062,8 +10062,11 @@ int wc_AesGcmEncrypt(Aes* aes, byte* out, const byte* in, word32 sz,
int ret;
/* argument checks */
if (aes == NULL || authTagSz > WC_AES_BLOCK_SIZE || ivSz == 0 ||
((authTagSz > 0) && (authTag == NULL)) ||
/* If sz is non-zero, both in and out must be set; if sz is 0, in and
* out are don't cares (GMAC case), matching wc_AesGcmDecrypt. */
if (aes == NULL || iv == NULL || ivSz == 0 ||
(sz != 0 && (in == NULL || out == NULL)) ||
authTag == NULL || authTagSz > WC_AES_BLOCK_SIZE ||
((authInSz > 0) && (authIn == NULL)))
{
return BAD_FUNC_ARG;
@@ -17140,7 +17143,8 @@ int wc_AesEaxEncryptFinal(AesEax* eax, byte* authTag, word32 authTagSz)
int ret;
word32 i;
if (eax == NULL || authTag == NULL || authTagSz > WC_AES_BLOCK_SIZE) {
if (eax == NULL || authTag == NULL || authTagSz == 0 ||
authTagSz > WC_AES_BLOCK_SIZE) {
return BAD_FUNC_ARG;
}
@@ -17197,7 +17201,8 @@ int wc_AesEaxDecryptFinal(AesEax* eax,
byte authTag[WC_AES_BLOCK_SIZE];
#endif
if (eax == NULL || authIn == NULL || authInSz > WC_AES_BLOCK_SIZE) {
if (eax == NULL || authIn == NULL || authInSz == 0 ||
authInSz > WC_AES_BLOCK_SIZE) {
return BAD_FUNC_ARG;
}