Commit 27f6123a70 for openssl.org
commit 27f6123a70b9e3f5d39e5987a314769e58bf2921
Author: Matt Caswell <matt@openssl.foundation>
Date: Wed Aug 26 14:43:29 2026 +0100
Fix clang-format violation in tls_process_client_hello()
Fix a minor style violation in ssl/statem/statem_srvr.c.
The violation arrived with the DTLS 1.3 series and was never caught
locally, because git rebase does not run the pre-commit hooks over the
commits it replays. CI did not catch it either: the check-style job
enumerates a pull request's changed files with `gh pr view --json
files`, which returns at most 100 entries, and the DTLS 1.3 pull
request changed 186 files -- ssl/statem/statem_srvr.c fell outside the
checked set. The following commit fixes that workflow bug.
Assisted-by: Claude:claude-opus-5
Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Merge-date: Mon Sep 7 14:09:39 2026
Merged-from: https://github.com/openssl/openssl/pull/32516
diff --git a/ssl/statem/statem_srvr.c b/ssl/statem/statem_srvr.c
index d53b9dd2a1..e108d49aa1 100644
--- a/ssl/statem/statem_srvr.c
+++ b/ssl/statem/statem_srvr.c
@@ -1965,7 +1965,7 @@ MSG_PROCESS_RETURN tls_process_client_hello(SSL_CONNECTION *s, PACKET *pkt)
if ((SSL_get_options(SSL_CONNECTION_GET_SSL(s)) & SSL_OP_COOKIE_EXCHANGE)
&& clienthello->dtls_cookie_len == 0
&& ossl_assert(ssl_get_min_max_version(s, &minversion,
- &maxversion, NULL)
+ &maxversion, NULL)
== 0)
&& ssl_version_cmp(s, maxversion, DTLS1_3_VERSION) < 0) {
OPENSSL_free(clienthello);