IMPORTANT FIX: use return value for integrity check

diff --git a/src/cadet/gnunet-service-cadet_tunnel.c b/src/cadet/gnunet-service-cadet_tunnel.c
index dd73be63e7f33cea2c87046c4cd3c097e35cfd21..4597a24a7d829e1b9e21ead3e1cdffce1c4a8d91 100644 (file)
--- a/src/cadet/gnunet-service-cadet_tunnel.c
+++ b/src/cadet/gnunet-service-cadet_tunnel.c
@@ -1944,6 +1944,12 @@ GCT_handle_encrypted (struct CadetTunnel *t,
   decrypted_size = t_decrypt_and_validate (t, cbuf, &msg[1], payload_size,
                                            msg->iv, &msg->hmac);
 
+  if (-1 == decrypted_size)
+  {
+    GNUNET_break_op (0);
+    return;
+  }
+
   off = 0;
   while (off < decrypted_size)
   {