Files
Adam Daley 6f9e66d2ae Reject truncated encrypted values before decryption
Backport the ciphertext length guard from main to 0.8-next. Return false before calling OpenSSL when decoded input cannot contain a complete IV and payload.

Cover truncated input in both formats and preserve legacy decryption. Addresses FOSSBILLING-NA9, FOSSBILLING-QF3 and FOSSBILLING-QF4.
2026-10-04 15:47:22 +01:00
..