Give a hint that decryption failed if payload length invalid

diff --git a/src/libcharon/encoding/payloads/encryption_payload.c b/src/libcharon/encoding/payloads/encryption_payload.c
index f3c4b3996dc4552a06e8632178b484f9847c081d..096079ad7674eddcecde3489e5b8105c3d67f35b 100644 (file)
--- a/src/libcharon/encoding/payloads/encryption_payload.c
+++ b/src/libcharon/encoding/payloads/encryption_payload.c
@@ -432,6 +432,13 @@ static status_t parse(private_encryption_payload_t *this, chunk_t plain)
        {
                payload_t *payload;
 
+               if (plain.len < 4 || untoh16(plain.ptr + 2) > plain.len)
+               {
+                       DBG1(DBG_ENC, "invalid %N payload length, decryption failed?",
+                                payload_type_names, type);
+                       parser->destroy(parser);
+                       return PARSE_ERROR;
+               }
                if (parser->parse_payload(parser, type, &payload) != SUCCESS)
                {
                        parser->destroy(parser);