Linux kernel (WireGuard): chacha20poly1305_encrypt and _decrypt truncate size_t lengths to 32 bits
Fixed · low · Memory-safety bug
If one call gets 4 GiB or more, only the first (length mod 4 GiB) bytes are encrypted and authenticated; the rest stays plaintext and unauthenticated.
Found: ; reported: ; status since: . Reporter: genproof team
Page for this report · Public report · Fix or proposed fix (see status)