Add sanity check to AuthenticatedSymmetricCipherBase::TruncatedFinal …

…(GH #954)
weidai11 · Jul 7, 2020 · a7b3286 · a7b3286
1 parent 9c5ea3a
commit a7b3286
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/authenc.cpp b/authenc.cpp
@@ -140,6 +140,9 @@ void AuthenticatedSymmetricCipherBase::ProcessData(byte *outString, const byte *
 
 void AuthenticatedSymmetricCipherBase::TruncatedFinal(byte *mac, size_t macSize)
 {
+	// https://github.com/weidai11/cryptopp/issues/954
+	this->ThrowIfInvalidTruncatedSize(macSize);
+
 	if (m_totalHeaderLength > MaxHeaderLength())
 		throw InvalidArgument(AlgorithmName() + ": header length of " + IntToString(m_totalHeaderLength) + " exceeds the maximum of " + IntToString(MaxHeaderLength()));