From b8904599e36f463c5e337116a2dcbe47a1f03f63 Mon Sep 17 00:00:00 2001 From: BZO95 Date: Wed, 4 Feb 2026 17:05:30 +0800 Subject: [PATCH] crypto/ecies: fix panic on short ciphertext in symDecrypt --- crypto/ecies/ecies.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/crypto/ecies/ecies.go b/crypto/ecies/ecies.go index 378d764a19..213678c80e 100644 --- a/crypto/ecies/ecies.go +++ b/crypto/ecies/ecies.go @@ -221,6 +221,9 @@ func symDecrypt(params *ECIESParams, key, ct []byte) (m []byte, err error) { if err != nil { return } + if len(ct) < params.BlockSize { + return nil, ErrInvalidMessage + } ctr := cipher.NewCTR(c, ct[:params.BlockSize])