A non-matching kdf_type moves from return 1 to return 0 if NO_CMS compiles out the KDF_X9_42 change - that is a different error return and that seems incorrect to be making that change as part of handling conditional compilation additions. Although it looks like that change is one that should be made - and attention drawn to it - in that returning 1 == success for this function and not deriving anything because you don't know or support the kdf type should return an error condition (<= 0 for this function).
_______________________________________________ openssl-bugs-mod mailing list [email protected] https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod _______________________________________________ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
