go-think / openssl / 36889431857

85%

master: 85%

Pull #30

github

fix(cipher): return error instead of panic when ciphertext is not block-aligned

CBCDecrypt and ECBDecrypt passed arbitrary-length input straight to
cipher.BlockMode.CryptBlocks, which panics ("crypto/cipher: input not
full blocks") when the ciphertext length is not a multiple of the block
size. Decrypting truncated or corrupted ciphertext is a common runtime
scenario, so both functions now validate the length up front and return
a descriptive error, matching the error-based behavior of the GCM path.

6 of 6 new or added lines in 2 files covered. (100.0%)

820 of 965 relevant lines covered (84.97%)

23555.97 hits per line