Loading crypto/evp/evp_enc.c +5 −0 Original line number Diff line number Diff line Loading @@ -549,6 +549,11 @@ int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl) return(0); } OPENSSL_assert(b <= sizeof ctx->final); /* * The following assumes that the ciphertext has been authenticated. * Otherwise it provides a padding oracle. */ n=ctx->final[b-1]; if (n == 0 || n > (int)b) { Loading Loading
crypto/evp/evp_enc.c +5 −0 Original line number Diff line number Diff line Loading @@ -549,6 +549,11 @@ int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl) return(0); } OPENSSL_assert(b <= sizeof ctx->final); /* * The following assumes that the ciphertext has been authenticated. * Otherwise it provides a padding oracle. */ n=ctx->final[b-1]; if (n == 0 || n > (int)b) { Loading
Andy Polyakov <appro@openssl.org> (cherry picked from commit 03af8430)