From 8dfa586462e2cb99a1e7cfa647d70052979930a6 Mon Sep 17 00:00:00 2001
From: Martin Stein <martin.stein@genode-labs.com>
Date: Tue, 30 Mar 2021 20:50:38 +0200
Subject: [PATCH] vfs/cbe_trust_anchor: fix bug in key decrypt

The plugin used the ciphertext instead of the plaintext buffer for key
decryption which led to bogus ciphertext keys.

Ref #4032
---
 repos/gems/include/cbe/vfs/trust_anchor_vfs.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/repos/gems/include/cbe/vfs/trust_anchor_vfs.h b/repos/gems/include/cbe/vfs/trust_anchor_vfs.h
index 91d6efa4f1..7e41c9c85f 100644
--- a/repos/gems/include/cbe/vfs/trust_anchor_vfs.h
+++ b/repos/gems/include/cbe/vfs/trust_anchor_vfs.h
@@ -298,8 +298,8 @@ struct Util::Trust_anchor_vfs
 				}
 
 				_decrypt_io_buffer = {
-					.base = _job.cipher.value,
-					.size = sizeof (_job.cipher)
+					.base = _job.plain.value,
+					.size = sizeof (_job.plain)
 				};
 
 				job.type  = Job::Type::DECRYPT_READ;