]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
fix: dev: QUIC crypto fixes
authorArаm Sаrgsyаn <aram@isc.org>
Tue, 21 Jul 2026 13:40:54 +0000 (13:40 +0000)
committerArаm Sаrgsyаn <aram@isc.org>
Tue, 21 Jul 2026 13:40:54 +0000 (13:40 +0000)
The isc_crypto_aead_open() and isc_crypto_aead_seal() functions
in ossl3.c didn't check if 'additional_data' exists before using
it. The checks were in place in the ossl1_1.c implementation. Use
the same conditions in the ossl3.c implementation too.

Additionally, the ciphertext length passed to the EVP_DecryptUpdate()
function included the tag length too which caused errors when decrypting.
Use the 'len' variable instead which doesn't include the tag length.

Merge branch 'aram/quic-crypto-fixes' into 'main'

See merge request isc-projects/bind9!12413


Trivial merge