From: Arаm Sаrgsyаn <aram@isc.org>
Date: Tue, 21 Jul 2026 13:40:54 +0000 (+0000)
Subject: fix: dev: QUIC crypto fixes
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f9ed83bd6f8e94c866101a07d655191f2aa5480c;p=thirdparty%2Fbind9.git

fix: dev: QUIC crypto fixes

The isc_crypto_aead_open() and isc_crypto_aead_seal() functions
in ossl3.c didn't check if 'additional_data' exists before using
it. The checks were in place in the ossl1_1.c implementation. Use
the same conditions in the ossl3.c implementation too.

Additionally, the ciphertext length passed to the EVP_DecryptUpdate()
function included the tag length too which caused errors when decrypting.
Use the 'len' variable instead which doesn't include the tag length.

Merge branch 'aram/quic-crypto-fixes' into 'main'

See merge request isc-projects/bind9!12413
---

f9ed83bd6f8e94c866101a07d655191f2aa5480c