tree 87215b798763c7baf71ada53670cdf827f7317de
parent 4a136ea00592d1b467c1834e8c5fd2ce5bd98ecd
author David Benjamin <davidben@google.com> 1554933822 -0500
committer Adam Langley <agl@google.com> 1554996698 +0000

Add missing nonce_len check to aead_aes_gcm_siv_asm_open.

Test invalid nonce lengths more thoroughly to cover this case on all our
AEADs. Thanks to Guido Vranken for catching this!

In doing so, this also reveals we have a ton of redundant error codes
(https://crbug.com/boringssl/269). I'll tidy that up in a separate
change as it may require some changes to code in Android. For now, this
change uses CIPHER_R_UNSUPPORTED_NONCE_SIZE just to be consistent with
the rest of that file.

Bug: 268
Change-Id: I0a479000ec3005ee55c828eaa92c8302b4625847
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/35545
Reviewed-by: Adam Langley <agl@google.com>