tree 36b6e7817f06310d6e5207999f830a7b5f63ea74
parent bc00bdaef7abc814f6d32d8c4a777b69f069452b
author Gilles Peskine <Gilles.Peskine@arm.com> 1559918308 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1559928810 +0200

Fix misuse of signed ints in the HAVEGE module

The elements of the HAVEGE state are manipulated with bitwise
operations, with the expectations that the elements are 32-bit
unsigned integers (or larger). But they are declared as int, and so
the code has undefined behavior. Clang with Asan correctly points out
some shifts that reach the sign bit.

Since these are supposed to be 32-bit unsigned integers, declare them
as uint32_t.

This is technically an API break, since the type mbedtls_havege_state
is exposed in a public header. However normal applications should not
be affected.