Commit 03af8430 authored by Emilia Kasper's avatar Emilia Kasper
Browse files

Add a comment noting the padding oracle. 



Reviewed-by: default avatarAndy Polyakov <appro@openssl.org>
parent 4ad2d3ac

crypto/evp/evp_enc.c

+5 −0
Original line number Diff line number Diff line
@@ -524,6 +524,11 @@ int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl) 
			return(0);

			}

		OPENSSL_assert(b <= sizeof ctx->final);



		/*

		 * The following assumes that the ciphertext has been authenticated.

		 * Otherwise it provides a padding oracle.

		 */

		n=ctx->final[b-1];

		if (n == 0 || n > (int)b)

			{