@@ -13268,7 +13268,8 @@ int wc_PKCS7_DecodeEnvelopedData(wc_PKCS7* pkcs7, byte* in,
1326813268 padCheck |= ctMaskGT(padLen, expBlockSz);
1326913269 padCheck |= ctMaskGT(padLen, encryptedContentSz);
1327013270 padCheck |= ctMaskGT(expBlockSz, encryptedContentSz);
13271- for (padIndex = encryptedContentSz - expBlockSz;
13271+ for (padIndex = encryptedContentSz < expBlockSz ? 0 :
13272+ encryptedContentSz - expBlockSz;
1327213273 padIndex < encryptedContentSz; padIndex++) {
1327313274 byte inPad = ctMaskGTE(padIndex,
1327413275 encryptedContentSz - (int)padLen);
@@ -15334,7 +15335,8 @@ int wc_PKCS7_DecodeEncryptedData(wc_PKCS7* pkcs7, byte* in, word32 inSz,
1533415335 padCheck |= ctMaskGT(padLen, expBlockSz);
1533515336 padCheck |= ctMaskGT(padLen, encryptedContentSz);
1533615337 padCheck |= ctMaskGT(expBlockSz, encryptedContentSz);
15337- for (padIndex = encryptedContentSz - expBlockSz;
15338+ for (padIndex = encryptedContentSz < expBlockSz ? 0 :
15339+ encryptedContentSz - expBlockSz;
1533815340 padIndex < encryptedContentSz; padIndex++) {
1533915341 byte inPad = ctMaskGTE(padIndex,
1534015342 encryptedContentSz - (int)padLen);
0 commit comments