commit 27b34d5bad4766ab8b4d6b81d4571b946b70f55a
author Hanno Becker <hanno.becker@arm.com> Fri Oct 20 14:24:51 2017 +0100
committer Hanno Becker <hanno.becker@arm.com> Fri Oct 20 14:24:51 2017 +0100
tree 61a50542126b097305980d04fa254127d272e08c
parent 005939db984168406d8fed04874379677cdd630f

Wrong identifier used to check Encrypt-then-MAC flag

This commit fixes a comparison of ssl_session->encrypt_then_mac against the
ETM-unrelated constant MBEDTLS_SSL_EXTENDED_MS_DISABLED. Instead,
MBEDTLS_SSL_ETM_DISABLED should be used.

The typo is has no functional effect since both constants have the same value 0.

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 37f415d..f98e9e8 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -2042,7 +2042,7 @@
     const mbedtls_ssl_ciphersuite_t *suite = NULL;
     const mbedtls_cipher_info_t *cipher = NULL;
 
-    if( ssl->session_negotiate->encrypt_then_mac == MBEDTLS_SSL_EXTENDED_MS_DISABLED ||
+    if( ssl->session_negotiate->encrypt_then_mac == MBEDTLS_SSL_ETM_DISABLED ||
         ssl->minor_ver == MBEDTLS_SSL_MINOR_VERSION_0 )
     {
         *olen = 0;