mirror of
https://github.com/FOSSBilling/FOSSBilling.git
synced 2026-11-04 11:07:37 +09:00
Backport the ciphertext length guard from main to 0.8-next. Return false before calling OpenSSL when decoded input cannot contain a complete IV and payload. Cover truncated input in both formats and preserve legacy decryption. Addresses FOSSBILLING-NA9, FOSSBILLING-QF3 and FOSSBILLING-QF4.