crypto/ecies: fix panic on short ciphertext in symDecrypt

BZO95 · BZO95 · commit b8904599e36f · 2026-02-04T17:05:30.000+08:00
diff --git a/crypto/ecies/ecies.go b/crypto/ecies/ecies.go
@@ -221,6 +221,9 @@ func symDecrypt(params *ECIESParams, key, ct []byte) (m []byte, err error) {
 	if err != nil {
 		return
 	}
+	if len(ct) < params.BlockSize {
+		return nil, ErrInvalidMessage
+	}
 
 	ctr := cipher.NewCTR(c, ct[:params.BlockSize])
 

Original file line number	Diff line number	Diff line change
`@@ -221,6 +221,9 @@ func symDecrypt(params *ECIESParams, key, ct []byte) (m []byte, err error) {`
`221`	`221`	`if err != nil {`
`222`	`222`	`return`
`223`	`223`	`}`
	`224`	`+ if len(ct) < params.BlockSize {`
	`225`	`+ return nil, ErrInvalidMessage`
	`226`	`+ }`
`224`	`227`
`225`	`228`	`ctr := cipher.NewCTR(c, ct[:params.BlockSize])`
`226`	`229`