File 002-migrate-to-mbedtls-3.patch of Package shadowsocks-libev

From 60ad4ca4b5d1969e31db6efe6db4d82f88dbdbe7 Mon Sep 17 00:00:00 2001
From: Ayu <claire@ayu.land>
Date: Sun, 18 Jan 2026 16:59:48 +0800
Subject: [PATCH] Fix failed assertion with Mbed TLS 3

---
 src/aead.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/aead.c b/src/aead.c
index 73349da64..24144425c 100644
--- a/src/aead.c
+++ b/src/aead.c
@@ -180,11 +180,11 @@ aead_cipher_encrypt(cipher_ctx_t *cipher_ctx,
 #if MBEDTLS_VERSION_NUMBER < 0x03000000
         err = mbedtls_cipher_auth_encrypt(cipher_ctx->evp, n, nlen, ad, adlen,
                                           m, mlen, c, clen, c + mlen, tlen);
+        *clen += tlen;
 #else
         err = mbedtls_cipher_auth_encrypt_ext(cipher_ctx->evp, n, nlen, ad, adlen,
                                               m, mlen, c, mlen + tlen, clen, tlen);
 #endif
-        *clen += tlen;
         break;
     case CHACHA20POLY1305IETF:
         err = crypto_aead_chacha20poly1305_ietf_encrypt(c, &long_clen, m, mlen,