From febe474926b85dc341cbbd5a46b1684bca20aed3 Mon Sep 17 00:00:00 2001 From: Markus Theil Date: Thu, 9 Apr 2026 12:17:33 +0200 Subject: [PATCH] encrypted-payload: Check for non-zero payload size Signed-off-by: Markus Theil --- src/libcharon/encoding/payloads/encrypted_payload.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcharon/encoding/payloads/encrypted_payload.c b/src/libcharon/encoding/payloads/encrypted_payload.c index 4821c6108..4ac7aba94 100644 --- a/src/libcharon/encoding/payloads/encrypted_payload.c +++ b/src/libcharon/encoding/payloads/encrypted_payload.c @@ -637,7 +637,7 @@ static status_t decrypt_content(char *label, aead_t *aead, chunk_t encrypted, crypt.ptr = iv.ptr + iv.len; crypt.len = encrypted.len - iv.len; - if (iv.len + icv.len > encrypted.len || + if (iv.len + icv.len >= encrypted.len || (crypt.len - icv.len) % bs) { DBG1(DBG_ENC, "decrypting %s payload failed, invalid length", label);