SM2 Decryption Buffer Overflow

A buffer overflow in the Chinese national SM2 ECC cipher, which presumably nobody has enabled in North America.

I&#x27;m guessing this is common API design in the world of C libraries? Coming from Swift &#x2F; other high-level languages, it seems awfully error-prone to have to call an API multiple times, sometimes with null arguments, sometimes with pointers to buffers that <i>hopefully</i> are the right size, just to process some data. Programmer errors &#x2F; misinterpretation of the documentation leading to programmer errors seems inevitable.