QPQ-AG/libsodium
12
0
Fork 0
mirror of https://github.com/jedisct1/libsodium.git synced 2026-08-25 08:37:13 +09:00
Code Issues Packages Projects Releases Wiki Activity

Reject impossible lengths in crypto_box

Browse Source
This commit is contained in:
Frank Denis
2026-04-09 22:17:50 +02:00
parent 51be825e1a
commit 35df98abf0
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libsodium/crypto_box/crypto_box_seal.c
+3
View File
@@ -29,6 +29,9 @@ crypto_box_seal(unsigned char *c, const unsigned char *m,
unsigned char esk[crypto_box_SECRETKEYBYTES];
int ret;
if (mlen > crypto_box_MESSAGEBYTES_MAX) {
sodium_misuse(); /* LCOV_EXCL_LINE */
}
if (crypto_box_keypair(epk, esk) != 0) {
return -1; /* LCOV_EXCL_LINE */
}
src/libsodium/crypto_box/curve25519xchacha20poly1305/box_seal_curve25519xchacha20poly1305.c
+3
View File
@@ -35,6 +35,9 @@ crypto_box_curve25519xchacha20poly1305_seal(unsigned char *c, const unsigned cha
unsigned char esk[crypto_box_curve25519xchacha20poly1305_SECRETKEYBYTES];
int ret;
if (mlen > crypto_box_curve25519xchacha20poly1305_MESSAGEBYTES_MAX) {
sodium_misuse(); /* LCOV_EXCL_LINE */
}
if (crypto_box_curve25519xchacha20poly1305_keypair(epk, esk) != 0) {
return -1; /* LCOV_EXCL_LINE */
}