tree fcdfb43f90499a96c0c95ac4f141e514c9b607eb
parent e5d6b2fbb45b5638cc9a4c98508748436cb07a44
author Adam Langley <agl@chromium.org> 1704807886 -0800
committer Adam Langley <agl@google.com> 1705688738 +0000

Fix AES-GCM-SIV with huge inputs on 32-bit.

The asm code is 64-bit only, so multipling a `size_t` by eight to get a
number of bits is valid and the bounds on the inputs are checked
accordingly. But on 32-bit, that calculation will overflow for huge
inputs.

Change-Id: I6d2171becd6b6259593b2aa80105d8cae1ec7ed4
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/65188
Reviewed-by: David Benjamin <davidben@google.com>