1 files changed, 2 insertions, 0 deletions
diff --git a/libs/libsodium/src/crypto_secretstream/xchacha20poly1305/secretstream_xchacha20poly1305.c b/libs/libsodium/src/crypto_secretstream/xchacha20poly1305/secretstream_xchacha20poly1305.c
index 9c321ceced..e731689293 100644
--- a/libs/libsodium/src/crypto_secretstream/xchacha20poly1305/secretstream_xchacha20poly1305.c
+++ b/libs/libsodium/src/crypto_secretstream/xchacha20poly1305/secretstream_xchacha20poly1305.c
@@ -148,6 +148,7 @@ crypto_secretstream_xchacha20poly1305_push
     crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen);
     crypto_onetimeauth_poly1305_update
         (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf);
+    /* should have been (0x10 - (sizeof block + mlen)) & 0xf to keep input blocks aligned */
 
     STORE64_LE(slen, (uint64_t) adlen);
     crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen);
@@ -224,6 +225,7 @@ crypto_secretstream_xchacha20poly1305_pull
     crypto_onetimeauth_poly1305_update(&poly1305_state, c, mlen);
     crypto_onetimeauth_poly1305_update
         (&poly1305_state, _pad0, (0x10 - (sizeof block) + mlen) & 0xf);
+    /* should have been (0x10 - (sizeof block + mlen)) & 0xf to keep input blocks aligned */
 
     STORE64_LE(slen, (uint64_t) adlen);
     crypto_onetimeauth_poly1305_update(&poly1305_state, slen, sizeof slen);