Add NULL checks for context/ciphertext/out in wc_HpkeContextOpenBase F-1374

julek-wolfssl · julek-wolfssl · commit d7ecfec5e29c · 2026-04-03T10:34:55.000+02:00
diff --git a/wolfcrypt/src/hpke.c b/wolfcrypt/src/hpke.c
@@ -1175,7 +1175,7 @@ int wc_HpkeContextOpenBase(Hpke* hpke, HpkeBaseContext* context, byte* aad,
     int ret;
     byte nonce[HPKE_Nn_MAX];
     WC_DECLARE_VAR(aes, Aes, 1, 0);
-    if (hpke == NULL) {
+    if (hpke == NULL || context == NULL || ciphertext == NULL || out == NULL) {
         return BAD_FUNC_ARG;
     }
 

Original file line number	Diff line number	Diff line change
`@@ -1175,7 +1175,7 @@ int wc_HpkeContextOpenBase(Hpke* hpke, HpkeBaseContext* context, byte* aad,`
`1175`	`1175`	`int ret;`
`1176`	`1176`	`byte nonce[HPKE_Nn_MAX];`
`1177`	`1177`	`WC_DECLARE_VAR(aes, Aes, 1, 0);`
`1178`		`- if (hpke == NULL) {`
	`1178`	`+ if (hpke == NULL \|\| context == NULL \|\| ciphertext == NULL \|\| out == NULL) {`
`1179`	`1179`	`return BAD_FUNC_ARG;`
`1180`	`1180`	`}`
`1181`	`1181`