From a3327784d9526fd69649089ea5c78a55906e9b2c Mon Sep 17 00:00:00 2001
From: Richard Levitte <levitte@openssl.org>
Date: Tue, 14 Jan 2020 02:32:42 +0100
Subject: CRYPTO: Remove support for ex_data fields when building the FIPS
 module

These fields are purely application data, and applications don't reach
into the bowels of the FIPS module, so these fields are never used
there.

Fixes #10835

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/10837)
---
 crypto/dh/dh_local.h | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'crypto/dh/dh_local.h')

diff --git a/crypto/dh/dh_local.h b/crypto/dh/dh_local.h
index a9041e9462..378cf5c957 100644
--- a/crypto/dh/dh_local.h
+++ b/crypto/dh/dh_local.h
@@ -33,7 +33,9 @@ struct dh_st {
     int seedlen;
     BIGNUM *counter;
     CRYPTO_REF_COUNT references;
+#ifndef FIPS_MODE
     CRYPTO_EX_DATA ex_data;
+#endif
     const DH_METHOD *meth;
     ENGINE *engine;
     CRYPTO_RWLOCK *lock;
-- 
cgit v1.2.3