mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-23 20:45:44 +01:00
2eaf2c7969
When MBEDTLS_SSL_ENCRYPT_THEN_MAC is enabled, but not
MBEDTLS_SSL_SOME_MODES_USE_MAC, mbedtls_ssl_derive_keys() and
build_transforms() will attempt to use a non-existent `encrypt_then_mac`
field in the ssl_transform.
Compile [ 93.7%]: ssl_tls.c
[Error] ssl_tls.c@865,14: 'mbedtls_ssl_transform {aka struct mbedtls_ssl_transform}' ha
s no member named 'encrypt_then_mac'
[ERROR] ./mbed-os/features/mbedtls/src/ssl_tls.c: In function 'mbedtls_ssl_derive_keys'
:
./mbed-os/features/mbedtls/src/ssl_tls.c:865:14: error: 'mbedtls_ssl_transform {aka str
uct mbedtls_ssl_transform}' has no member named 'encrypt_then_mac'
transform->encrypt_then_mac = session->encrypt_then_mac;
^~
Change mbedtls_ssl_derive_keys() and build_transforms() to only access
`encrypt_then_mac` if `encrypt_then_mac` is actually present. Fix any
unused variable warnings along the way, by additionally wrapping
function parameters with MBEDTLS_SSL_SOME_MODES_USE_MAC.
Add a regression test to detect when we have regressions with
configurations that do not include any MAC ciphersuites.
Fixes
|
||
---|---|---|
.. | ||
all.sh | ||
basic-build-test.sh | ||
check-doxy-blocks.pl | ||
check-files.py | ||
check-generated-files.sh | ||
check-names.sh | ||
check-python-files.sh | ||
curves.pl | ||
depends-hashes.pl | ||
depends-pkalgs.pl | ||
doxygen.sh | ||
gen_ctr_drbg.pl | ||
gen_gcm_decrypt.pl | ||
gen_gcm_encrypt.pl | ||
gen_pkcs1_v21_sign_verify.pl | ||
generate_test_code.py | ||
generate-afl-tests.sh | ||
key-exchanges.pl | ||
list-enum-consts.pl | ||
list-identifiers.sh | ||
list-macros.sh | ||
list-symbols.sh | ||
mbedtls_test.py | ||
recursion.pl | ||
run-test-suites.pl | ||
tcp_client.pl | ||
test_generate_test_code.py | ||
test_zeroize.gdb | ||
test-ref-configs.pl | ||
travis-log-failure.sh | ||
whitelist |