Fix compile failure with no-srp
authorMatt Caswell <matt@openssl.org>
Mon, 14 Dec 2015 09:57:06 +0000 (09:57 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 15 Dec 2015 11:22:34 +0000 (11:22 +0000)
Reviewed-by: Tim Hudson <tjh@openssl.org>
ssl/statem/statem_clnt.c

index 7c98228b425abf909a88cb749700b42843cfddb7..633e67731ca4c5d81a9a239afe757b2b66b46a0e 100644 (file)
@@ -1651,8 +1651,14 @@ MSG_PROCESS_RETURN tls_process_key_exchange(SSL *s, PACKET *pkt)
     if (alg_k & (SSL_kPSK | SSL_kRSAPSK)) {
     } else
 #endif                          /* !OPENSSL_NO_PSK */
+    /*
+     * Dummy "if" to ensure sane C code in the event of various OPENSSL_NO_*
+     * options
+     */
+    if (0) {
+    }
 #ifndef OPENSSL_NO_SRP
-    if (alg_k & SSL_kSRP) {
+    else if (alg_k & SSL_kSRP) {
         PACKET prime, generator, salt, server_pub;
         if (!PACKET_get_length_prefixed_2(pkt, &prime)
             || !PACKET_get_length_prefixed_2(pkt, &generator)