summaryrefslogtreecommitdiffstats
path: root/crypto/modes
diff options
context:
space:
mode:
authorAndy Polyakov <appro@openssl.org>2012-08-13 15:32:18 +0000
committerAndy Polyakov <appro@openssl.org>2012-08-13 15:32:18 +0000
commit78d767f5eca76577b7968367b7577ab97d2d4f84 (patch)
tree9427013cd8e5bbb2aa5a95bf7a4eae9b151ced5d /crypto/modes
parentc8b979e92949687ecff5fd312f8e8b9a6eef87b7 (diff)
gcm128.c: fix AAD-only case with AAD length not divisible by 16 [from HEAD].
PR: 2859 Submitted by: John Foley
Diffstat (limited to 'crypto/modes')
-rw-r--r--crypto/modes/gcm128.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/modes/gcm128.c b/crypto/modes/gcm128.c
index ec6c1b30b2..0e6ff8b0a1 100644
--- a/crypto/modes/gcm128.c
+++ b/crypto/modes/gcm128.c
@@ -1398,7 +1398,7 @@ int CRYPTO_gcm128_finish(GCM128_CONTEXT *ctx,const unsigned char *tag,
void (*gcm_gmult_p)(u64 Xi[2],const u128 Htable[16]) = ctx->gmult;
#endif
- if (ctx->mres)
+ if (ctx->mres || ctx->ares)
GCM_MUL(ctx,Xi);
if (is_endian.little) {