Establish that the default value of an out-arg for alerts is SSL_AD_DECODE_ERROR. We already have some cases where the default is DECODE_ERROR and, rather than have two defaults, just harmonise on that. (INTERNAL_ERROR might make more sense in some cases, but we don't want to have to remember what the default is in each case and nobody really cares what the actual value is anyway.) Change-Id: I28007898e8d6e7415219145eb9f43ea875028ab2 Reviewed-on: https://boringssl-review.googlesource.com/13720 Reviewed-by: Adam Langley <agl@google.com>
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index d66a2e6..cf46742 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c
@@ -2962,7 +2962,7 @@ int ssl_parse_clienthello_tlsext(SSL_HANDSHAKE *hs, const SSL_CLIENT_HELLO *client_hello) { SSL *const ssl = hs->ssl; - int alert = -1; + int alert = SSL_AD_DECODE_ERROR; if (ssl_scan_clienthello_tlsext(hs, client_hello, &alert) <= 0) { ssl3_send_alert(ssl, SSL3_AL_FATAL, alert); return 0; @@ -3085,7 +3085,7 @@ int ssl_parse_serverhello_tlsext(SSL_HANDSHAKE *hs, CBS *cbs) { SSL *const ssl = hs->ssl; - int alert = -1; + int alert = SSL_AD_DECODE_ERROR; if (ssl_scan_serverhello_tlsext(hs, cbs, &alert) <= 0) { ssl3_send_alert(ssl, SSL3_AL_FATAL, alert); return 0;