Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-08 19:29:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Reject MBEDTLS_SSL_SET_BADMAC_SEEN at compile time if DTLS is disabled

Browse Source 
Signed-off-by: Gilles Peskine <[email protected]>
This commit is contained in:
Gilles Peskine
2026-06-15 18:39:19 +02:00
parent 1453fda32c
commit 93460dafc7
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
library/ssl_misc.h
+6 -3
View File
@@ -495,13 +495,13 @@ static inline unsigned mbedtls_ssl_get_badmac_seen(const mbedtls_ssl_context *ss
return 0;
}
#if defined(MBEDTLS_SSL_PROTO_DTLS)
static inline void mbedtls_ssl_set_badmac_seen(mbedtls_ssl_context *ssl,
unsigned badmac_seen)
{
ssl->badmac_seen_or_in_hsfraglen = badmac_seen;
}
#if defined(MBEDTLS_SSL_PROTO_DTLS)
#define MBEDTLS_SSL_SET_BADMAC_SEEN(ssl, badmac_seen) \
do { \
if ((ssl)->conf->transport != MBEDTLS_SSL_TRANSPORT_DATAGRAM) { \
@@ -512,8 +512,11 @@ static inline void mbedtls_ssl_set_badmac_seen(mbedtls_ssl_context *ssl,
mbedtls_ssl_set_badmac_seen(ssl, badmac_seen); \
} while (0)
#else
#define MBEDTLS_SSL_SET_BADMAC_SEEN(ssl, badmac_seen) \
mbedtls_ssl_set_badmac_seen(ssl, badmac_seen)
/* We shouldn't be trying to set badmac_seen if DTLS support is disabled
* at compile time. If this is called from a code block that checks for the
* DTLS protocol at run time, it should be guarded by
* defined(MBEDTLS_SSL_PROTO_DTLS). */
#undef MBEDTLS_SSL_SET_BADMAC_SEEN
#endif
static inline unsigned mbedtls_ssl_get_in_hsfraglen(const mbedtls_ssl_context *ssl)