validate data lengths against value in header
authorPhilipp Gesang <philipp.gesang@intra2net.com>
Wed, 29 Jan 2020 14:27:17 +0000 (15:27 +0100)
committerThomas Jarosch <thomas.jarosch@intra2net.com>
Sat, 1 Feb 2020 13:42:43 +0000 (14:42 +0100)
commit58ed14b81561d92147ac123af66c5de26ed72136
tree802b4d025bd7a10088f76f9786fbb31630c82174
parente2f52c53ad4aa72ca04c3499fa3498855701d12d
validate data lengths against value in header

When decrypting we need to ensure that the decryptor will not
blindly accept data past the size that was specified by the
current object's header. Note that processing trailing data would
fail eventually when the GCM tag is checked; this check just
catches that case earlier.
deltatar/crypto.py
testing/test_crypto.py