From 65957fb00f34c86e933c521c72a7edc84cd250bd Mon Sep 17 00:00:00 2001
From: Frank Denis <github@pureftpd.org>
Date: Thu, 9 Apr 2026 23:01:48 +0200
Subject: [PATCH] Add some message size guards in AEGIS, for consistency

---
 src/libsodium/crypto_aead/aegis128l/aead_aegis128l.c | 3 +++
 src/libsodium/crypto_aead/aegis256/aead_aegis256.c   | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/src/libsodium/crypto_aead/aegis128l/aead_aegis128l.c b/src/libsodium/crypto_aead/aegis128l/aead_aegis128l.c
index 27662167..f746e28f 100644
--- a/src/libsodium/crypto_aead/aegis128l/aead_aegis128l.c
+++ b/src/libsodium/crypto_aead/aegis128l/aead_aegis128l.c
@@ -66,6 +66,9 @@ crypto_aead_aegis128l_encrypt(unsigned char *c, unsigned long long *clen_p, cons
     unsigned long long clen = 0ULL;
     int                ret;
 
+    if (mlen > crypto_aead_aegis128l_MESSAGEBYTES_MAX) {
+        sodium_misuse(); /* LCOV_EXCL_LINE */
+    }
     ret = crypto_aead_aegis128l_encrypt_detached(c, c + mlen, NULL, m, mlen, ad, adlen, nsec, npub,
                                                  k);
     if (clen_p != NULL) {
diff --git a/src/libsodium/crypto_aead/aegis256/aead_aegis256.c b/src/libsodium/crypto_aead/aegis256/aead_aegis256.c
index d94be1c6..a2ea3ec3 100644
--- a/src/libsodium/crypto_aead/aegis256/aead_aegis256.c
+++ b/src/libsodium/crypto_aead/aegis256/aead_aegis256.c
@@ -66,6 +66,9 @@ crypto_aead_aegis256_encrypt(unsigned char *c, unsigned long long *clen_p, const
     unsigned long long clen = 0ULL;
     int                ret;
 
+    if (mlen > crypto_aead_aegis256_MESSAGEBYTES_MAX) {
+        sodium_misuse(); /* LCOV_EXCL_LINE */
+    }
     ret =
         crypto_aead_aegis256_encrypt_detached(c, c + mlen, NULL, m, mlen, ad, adlen, nsec, npub, k);
     if (clen_p != NULL) {