denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

encrypted-payload: Check for non-zero payload size

Browse Source 
Signed-off-by: Markus Theil <[email protected]>
This commit is contained in:
Markus Theil
2026-04-13 15:12:55 +02:00
committed by Tobias Brunner
parent fdd06d99ec
commit febe474926
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/encoding/payloads/encrypted_payload.c
+1 -1
View File
@@ -637,7 +637,7 @@ static status_t decrypt_content(char *label, aead_t *aead, chunk_t encrypted,
crypt.ptr = iv.ptr + iv.len; crypt.ptr = iv.ptr + iv.len;
crypt.len = encrypted.len - iv.len; crypt.len = encrypted.len - iv.len;
if (iv.len + icv.len > encrypted.len || if (iv.len + icv.len >= encrypted.len ||
(crypt.len - icv.len) % bs) (crypt.len - icv.len) % bs)
{ {
DBG1(DBG_ENC, "decrypting %s payload failed, invalid length", label); DBG1(DBG_ENC, "decrypting %s payload failed, invalid length", label);