Workaround for compiler bug (GCC 4.8 and 4.9 when targetting 32-bit x86).

[BearSSL] / src / symcipher / aes_ct64.c

diff --git a/src/symcipher/aes_ct64.c b/src/symcipher/aes_ct64.c
index 981e63d..1523811 100644 (file)
--- a/src/symcipher/aes_ct64.c
+++ b/src/symcipher/aes_ct64.c
@@ -378,7 +378,7 @@ br_aes_ct64_skey_expand(uint64_t *skey,
 {
        unsigned u, v, n;
 
-       n = (num_rounds + 1) << 2;
+       n = (num_rounds + 1) << 1;
        for (u = 0, v = 0; u < n; u ++, v += 4) {
                uint64_t x0, x1, x2, x3;