From c6a2185c42af39bdbdf353d3cc22289acb704f9d Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Wed, 25 Mar 2026 10:32:36 +0100 Subject: [PATCH] pkcs5: Fail decryption if data is empty This avoids the previous bug early. --- src/libstrongswan/crypto/pkcs5.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/crypto/pkcs5.c b/src/libstrongswan/crypto/pkcs5.c index 4851d3f96..822656f84 100644 --- a/src/libstrongswan/crypto/pkcs5.c +++ b/src/libstrongswan/crypto/pkcs5.c @@ -349,7 +349,7 @@ METHOD(pkcs5_t, decrypt, bool, chunk_t keymat, key, iv; derive_t kdf; - if (!ensure_crypto_primitives(this, data) || !decrypted) + if (!data.len || !ensure_crypto_primitives(this, data) || !decrypted) { return FALSE; }