Heap corruption via undersized AES-KW-PAD output buffers

Heap buffer overflow in the openssl Rust crate 0.10.0 through 0.10.78 allows attackers to corrupt heap memory during AES-KW-PAD encryption. CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update allocate insufficient output space for AES-KW-PAD growth, so OpenSSL writes up to seven bytes beyond the buffer when the input length is not divisible by eight. Exposure requires a consuming application to use an AES key-wrap-with-padding cipher with an attacker-influenced plaintext length; the bounded result is attacker-controllable heap corruption.