Skip to content

Conversation

@mamckee
Copy link
Collaborator

@mamckee mamckee commented May 7, 2025

PR #112 fixed an issue where the GCM IV was incorrectly cleared if the IV length was set to the current IV length, and the IV was already set. This was because scossl_aes_gcm_set_iv_len unconditionally cleared the IV. In fixing this I missed a section where the IV should be freed outside the function. I have checked everywhere else scossl_aes_ccm_set_iv_len is called and confirmed this was the only spot missing a free.

Fixes #115

@mamckee mamckee requested a review from samuel-lee-msft May 7, 2025 16:33
@mamckee mamckee merged commit 3f36658 into scossl-1.8 May 7, 2025
1 check passed
@mamckee mamckee deleted the mamckee/gcm_leak branch May 19, 2025 21:18
mamckee added a commit that referenced this pull request May 21, 2025
* Mamckee/gcm leak (#116)

* Add free back to GCM IV set

* Update minor version

* Revert "ML-KEM and ML-KEM hybrid (#103)"

This reverts commit 2988e46.
mamckee added a commit that referenced this pull request May 22, 2025
* Mamckee/gcm leak (#116)

* Add free back to GCM IV set

* Update minor version

* Update version for merge

* Update version to 1.10.0-dev
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants