Files
wolfssl/wolfcrypt
Juliusz Sosinowicz fb8efa4ec8 Validate NULL parameters in wc_AesCbcEncryptWithKey (F-1376)
wc_AesCbcEncryptWithKey did not check out/in/key/iv for NULL before calling
wc_AesSetKey/wc_AesCbcEncrypt, unlike its counterpart wc_AesCbcDecryptWithKey.
A NULL key can reach wc_AesSetKey implementations that XMEMCPY userKey without
a NULL guard (e.g. the STM32 path), causing a crash at the API boundary.

Add the same NULL guard wc_AesCbcDecryptWithKey uses.
2026-07-22 13:30:22 +02:00
..
2026-07-22 10:54:43 +02:00