mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-09-27 08:29:27 +00:00
f75da20d3e
Backport commits from the PR[1] mentioned in the nvd[2] [1]https://github.com/wolfSSL/wolfssl/pull/10111 [2]https://nvd.nist.gov/vuln/detail/CVE-2026-5446 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
28 lines
1.1 KiB
Diff
28 lines
1.1 KiB
Diff
From 88fc52b8e3bca58389a4a107a77f9dc52e3baa12 Mon Sep 17 00:00:00 2001
|
|
From: Eric Blankenhorn <eric@wolfssl.com>
|
|
Date: Tue, 31 Mar 2026 09:35:43 -0500
|
|
Subject: [PATCH] Fix feedback from review
|
|
|
|
(cherry picked from commit a3fad2af91da39e2a4bdaf528bcfb2a94c4dd67c)
|
|
|
|
CVE: CVE-2026-5446
|
|
Upstream-Status: Backport [https://github.com/wolfSSL/wolfssl/commit/a3fad2af91da39e2a4bdaf528bcfb2a94c4dd67c]
|
|
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
|
|
---
|
|
src/internal.c | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/internal.c b/src/internal.c
|
|
index fbf227a93..ccfecc235 100644
|
|
--- a/src/internal.c
|
|
+++ b/src/internal.c
|
|
@@ -20025,7 +20025,7 @@ static WC_INLINE int Encrypt(WOLFSSL* ssl, byte* out, const byte* input,
|
|
#ifdef HAVE_ARIA
|
|
if (ssl->specs.bulk_cipher_algorithm == wolfssl_aria_gcm)
|
|
{
|
|
- /* finalize authentication cipher — wc_AriaEncrypt is
|
|
+ /* finalize authentication cipher -- wc_AriaEncrypt is
|
|
* stateless, so the explicit IV must always advance */
|
|
AeadIncrementExpIV(ssl);
|
|
if (ssl->encrypt.nonce)
|