commit 8f0ef519d41441282110a14acb5fb2c1419bf16e
author David Horstmann <david.horstmann@arm.com> Mon Dec 11 15:17:11 2023 +0000
committer David Horstmann <david.horstmann@arm.com> Tue Feb 06 13:39:02 2024 +0000
tree b26c3d6b35e710d7ccf03bd3a9e7d391473097e1
parent 52402ec0fe119fe06a37a221ab70e62fc5272112

Add buffer copying to psa_aead_set_nonce()

Signed-off-by: David Horstmann <david.horstmann@arm.com>

library/psa_crypto.c

diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 87c7cac..b58758c 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -4938,11 +4938,14 @@
 /* Set the nonce for a multipart authenticated encryption or decryption
    operation.*/
 psa_status_t psa_aead_set_nonce(psa_aead_operation_t *operation,
-                                const uint8_t *nonce,
+                                const uint8_t *nonce_external,
                                 size_t nonce_length)
 {
     psa_status_t status = PSA_ERROR_CORRUPTION_DETECTED;
 
+    LOCAL_INPUT_DECLARE(nonce_external, nonce);
+    LOCAL_INPUT_ALLOC(nonce_external, nonce_length, nonce);
+
     if (operation->id == 0) {
         status = PSA_ERROR_BAD_STATE;
         goto exit;
@@ -4969,6 +4972,8 @@
         psa_aead_abort(operation);
     }
 
+    LOCAL_INPUT_FREE(nonce_external, nonce);
+
     return status;
 }