From 67a37db2d2a38664f9624c4e3fac08db23117870 Mon Sep 17 00:00:00 2001 From: Hanno Becker Date: Thu, 28 May 2020 16:27:07 +0100 Subject: [PATCH] Add missing configuration guards to SSL record protection helpers Signed-off-by: Hanno Becker --- library/ssl_msg.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/library/ssl_msg.c b/library/ssl_msg.c index 4ae1b8f08..5146605e2 100644 --- a/library/ssl_msg.c +++ b/library/ssl_msg.c @@ -541,13 +541,15 @@ static void ssl_mac( mbedtls_md_context_t *md_ctx, } #endif /* MBEDTLS_SSL_PROTO_SSL3 */ +#if defined(MBEDTLS_GCM_C) || \ + defined(MBEDTLS_CCM_C) || \ + defined(MBEDTLS_CHACHAPOLY_C) static int ssl_transform_aead_dynamic_iv_is_explicit( mbedtls_ssl_transform const *transform ) { return( transform->ivlen != transform->fixed_ivlen ); } - /* Compute IV := ( fixed_iv || 0 ) XOR ( 0 || dynamic_IV ) * * Concretely, this occurs in two variants: @@ -575,6 +577,7 @@ static void ssl_build_record_nonce( unsigned char *dst_iv, for( i = 0; i < dynamic_iv_len; i++ ) dst_iv[i] ^= dynamic_iv[i]; } +#endif /* MBEDTLS_GCM_C || MBEDTLS_CCM_C || MBEDTLS_CHACHAPOLY_C */ int mbedtls_ssl_encrypt_buf( mbedtls_ssl_context *ssl, mbedtls_ssl_transform *transform,