base64ct: reject zero-length decode requests

Author: mpalmer

base64ct/src/decoder.rs

@@ -103,8 +103,13 @@ impl<'i, E: Encoding> Decoder<'i, E> {
     ///
     /// # Returns
     /// - `Ok(bytes)` if the expected amount of data was read
-    /// - `Err(Error::InvalidLength)` if the exact amount of data couldn't be read
+    /// - `Err(Error::InvalidLength)` if the exact amount of data couldn't be read, or
+    ///   if the output buffer has a length of 0
     pub fn decode<'o>(&mut self, out: &'o mut [u8]) -> Result<&'o [u8], Error> {
+        if out.is_empty() {
+            return Err(InvalidLength);
+        }
+
         if self.is_finished() {
             return Err(InvalidLength);
         }
@@ -592,6 +597,16 @@ mod tests {
         assert_eq!(buf.as_slice(), MULTILINE_PADDED_BIN);
     }
 
+    #[cfg(feature = "std")]
+    #[test]
+    fn reject_empty_read() {
+        let mut decoder = Decoder::<Base64>::new(b"AAAA").unwrap();
+
+        let mut buf: Vec<u8> = vec![];
+
+        assert_eq!(decoder.decode(&mut buf), Err(InvalidLength));
+    }
+
     /// Core functionality of a decoding test
     #[allow(clippy::arithmetic_side_effects)]
     fn decode_test<'a, F, V>(expected: &[u8], f: F)