Commit 3e8ac4c0ce for strongswan.org

commit 3e8ac4c0ce33b51483a7156e22f70ad3940e57ee
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Mon Oct 26 18:56:03 2026 +0100

    ctrl: Enforce correct IV length when decrypting

diff --git a/src/libstrongswan/plugins/ctr/ctr_ipsec_crypter.c b/src/libstrongswan/plugins/ctr/ctr_ipsec_crypter.c
index 69540b0789..ab3691f7d9 100644
--- a/src/libstrongswan/plugins/ctr/ctr_ipsec_crypter.c
+++ b/src/libstrongswan/plugins/ctr/ctr_ipsec_crypter.c
@@ -85,6 +85,10 @@ static bool crypt_ctr(private_ctr_ipsec_crypter_t *this,
 METHOD(crypter_t, crypt, bool,
 	private_ctr_ipsec_crypter_t *this, chunk_t in, chunk_t iv, chunk_t *out)
 {
+	if (iv.len != sizeof(this->state.iv))
+	{
+		return FALSE;
+	}
 	memcpy(this->state.iv, iv.ptr, sizeof(this->state.iv));

 	if (out)