pkcs5: Fail decryption if data is empty

This avoids the previous bug early.

diff --git a/src/libstrongswan/crypto/pkcs5.c b/src/libstrongswan/crypto/pkcs5.c
index 4851d3f969bd6cbad0eac51f61fdd2a18ab1af35..822656f84b221df59797905b830f3cd42e7ccbb8 100644 (file)
--- a/src/libstrongswan/crypto/pkcs5.c
+++ b/src/libstrongswan/crypto/pkcs5.c
@@ -349,7 +349,7 @@ METHOD(pkcs5_t, decrypt, bool,
        chunk_t keymat, key, iv;
        derive_t kdf;
 
-       if (!ensure_crypto_primitives(this, data) || !decrypted)
+       if (!data.len || !ensure_crypto_primitives(this, data) || !decrypted)
        {
                return FALSE;
        }