Commit b554eef4 authored by Nils Larsch's avatar Nils Larsch
Browse files

the final byte of a pkcs7 padded plaintext can never be 0 

Submitted by: K S Sreeram <sreeram@tachyontech.net>
parent 0066590f

crypto/evp/evp_enc.c

+1 −1
Original line number Diff line number Diff line
@@ -449,7 +449,7 @@ int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl) 
			}

		OPENSSL_assert(b <= sizeof ctx->final);

		n=ctx->final[b-1];

		if (n > (int)b)

		if (n == 0 || n > (int)b)

			{

			EVPerr(EVP_F_EVP_DECRYPTFINAL_EX,EVP_R_BAD_DECRYPT);

			return(0);