From 5c3f18d37cc46b102218f2857a7db694aee76f43 Mon Sep 17 00:00:00 2001
From: Gilles Peskine <Gilles.Peskine@arm.com>
Date: Mon, 31 May 2021 21:21:12 +0200
Subject: [PATCH] MBEDTLS_PK_PARSE_EC_EXTENDED is incompatible with
MBEDTLS_ECP_ALT
... unless the alt implementation defines a group structure that's mostly
compatible with the built-in one and supports partially filled group
structures in the same way.
It would be possible to rewrite the SpecifiedECDomain parsing code to avoid
requiring support for partially filled group structures, but that's too
complicated to do now.
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
---
tests/scripts/all.sh | 3 +++
1 file changed, 3 insertions(+)
diff --git a/tests/scripts/all.sh b/tests/scripts/all.sh
index 53b4e250e..6f1f9c31c 100755
--- a/tests/scripts/all.sh
+++ b/tests/scripts/all.sh
@@ -1376,6 +1376,9 @@ component_build_module_alt () {
scripts/config.py unset MBEDTLS_DEBUG_C
# You can only have one threading implementation: alt or pthread, not both.
scripts/config.py unset MBEDTLS_THREADING_PTHREAD
+ # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields
+ # directly and assumes the implementation works with partial groups.
+ scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
# Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable
# MBEDTLS_XXX_YYY_ALT which are for single functions.
scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT'