Fix

Author: larseggert

src/aead.rs

@@ -309,6 +309,8 @@ mod recprot {
                 .len()
                 .checked_sub(super::TAG_LEN)
                 .ok_or_else(|| Error::from(SEC_ERROR_BAD_DATA))?;
+            let mut tag = [0u8; super::TAG_LEN];
+            tag.copy_from_slice(&data[ct_len..]);
             let data_ptr = data.as_mut_ptr();
             let out_len = unsafe {
                 aead_op(
@@ -318,7 +320,7 @@ mod recprot {
                     aad,
                     data_ptr,
                     data.len(),
-                    data_ptr.add(ct_len),
+                    tag.as_mut_ptr(),
                     data_ptr.cast_const(),
                     ct_len,
                 )

tests/aead.rs

@@ -163,6 +163,13 @@ fn roundtrip(cipher: Cipher) {
         .decrypt(42, AAD, ct, &mut pt_buf[..ct.len()])
         .expect("decrypt");
     assert_eq!(pt, PLAINTEXT);
+
+    let mut ip_buf = Vec::from(PLAINTEXT);
+    ip_buf.resize(PLAINTEXT.len() + aead.expansion(), 0);
+    let enc_len = aead.encrypt_in_place(42, AAD, &mut ip_buf).unwrap();
+    assert_eq!(enc_len, ip_buf.len());
+    let dec_len = aead.decrypt_in_place(42, AAD, &mut ip_buf).unwrap();
+    assert_eq!(&ip_buf[..dec_len], PLAINTEXT);
 }
 
 #[test]