if an // implementation leaves tagSize uninitialized, for example. if g.tagSize < gcmMinimumTagSize { panic("crypto/cipher: incorrect GCM tag size") } if len(ciphertext) < g.tagSize { return nil, errOpen } if uint64(len(ciphertext)) > uint64((1<<32)-2)*gcmBlockSize+uint64(g.tagSize) { return nil, errOpen } ret, out := sliceForAppend(dst, len(ciphertext)-g.tagSize) if alias.InexactOverlap(out, ciphertext) { panic("crypto/cipher: invalid buffer overlap of output and input") } if alias.AnyOverlap(out,...