diff --git a/components/net/sf/briar/transport/IncomingEncryptionLayer.java b/components/net/sf/briar/transport/IncomingEncryptionLayer.java index 7e0fc8be1..05e15c1dd 100644 --- a/components/net/sf/briar/transport/IncomingEncryptionLayer.java +++ b/components/net/sf/briar/transport/IncomingEncryptionLayer.java @@ -120,8 +120,9 @@ class IncomingEncryptionLayer implements FrameReader { if(payloadLength > plaintextLength - HEADER_LENGTH) throw new FormatException(); // If there's any padding it must be all zeroes - for(int i = HEADER_LENGTH + payloadLength; i < plaintextLength; i++) + for(int i = HEADER_LENGTH + payloadLength; i < plaintextLength; i++) { if(frame[i] != 0) throw new FormatException(); + } frameNumber++; return payloadLength; } diff --git a/components/net/sf/briar/transport/OutgoingEncryptionLayer.java b/components/net/sf/briar/transport/OutgoingEncryptionLayer.java index 22bb1bcea..5e8ec05db 100644 --- a/components/net/sf/briar/transport/OutgoingEncryptionLayer.java +++ b/components/net/sf/briar/transport/OutgoingEncryptionLayer.java @@ -97,8 +97,9 @@ class OutgoingEncryptionLayer implements FrameWriter { ciphertextLength = frameLength; } // If there's any padding it must all be zeroes - for(int i = HEADER_LENGTH + payloadLength; i < plaintextLength; i++) + for(int i = HEADER_LENGTH + payloadLength; i < plaintextLength; i++) { frame[i] = 0; + } // Encrypt and authenticate the frame FrameEncoder.encodeIv(iv, frameNumber); FrameEncoder.encodeAad(aad, frameNumber, plaintextLength);