Ingo Franzki 73d27be1ac ICSF: Fix Output buffer size check for CBC-PAD decryption ...

For CBC-PAD the output buffer size sent to ICSF was inflated to at least
cipher_text_len so the server does not send back RSN_TOO_SHORT for the
padded-then-unpadded output. Validate length against the inflated clear_len
(what we told the server) and bv_clear_data.bv_len against the caller's
real buffer. When the real buffer is too small for the unpadded result,
propagate CKR_BUFFER_TOO_SMALL so the caller can retry.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>

2026-10-22 12:53:13 +02:00

..

include

PKCSSLOTD: Reduce the number of admin connections to 32

2026-08-25 13:03:17 +02:00

lib

ICSF: Fix Output buffer size check for CBC-PAD decryption

2026-10-22 12:53:13 +02:00

sbin

P11KMIP: Fix NULL-check, wrong dereference, and rc ordering

2026-10-05 08:35:13 +02:00

usr.mk

Expand %C% and %D% in makefiles

2018-11-06 17:22:29 +01:00