Commit 025697a9 authored by Andy Polyakov's avatar Andy Polyakov
Browse files

modes/ctr128.c: fix false carry in counter increment procedure. 



GH issue #1916 affects only big-endian platforms. TLS is not affected,
because TLS fragment is never big enough.

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
(cherry picked from commit 76f572ed)
parent 04bec2a3

crypto/modes/ctr128.c

+1 −1
Original line number Diff line number Diff line
@@ -52,7 +52,7 @@ static void ctr128_inc_aligned(unsigned char *counter) 
        --n;

        d = data[n] += c;

        /* did addition carry? */

        c = ((d - c) ^ d) >> (sizeof(size_t) * 8 - 1);

        c = ((d - c) & ~d) >> (sizeof(size_t) * 8 - 1);

    } while (n);

}

#endif