commit a750e1be5fde58ab6ec0b2ad7b4b1f0933ac8f65
author Ben Taylor <ben.taylor@linaro.org> Tue Jul 22 14:27:47 2025 +0100
committer Ben Taylor <ben.taylor@linaro.org> Wed Jul 30 07:55:14 2025 +0100
tree 01241d7c08b8a644bde07ef9de30acd4320c13e8
parent 8519c3e0bae71a7563f963203b5a7bda7aee64aa

Minor comment updates

Signed-off-by: Ben Taylor <ben.taylor@linaro.org>

programs/fuzz/fuzz_server.c

diff --git a/programs/fuzz/fuzz_server.c b/programs/fuzz/fuzz_server.c
index 40fd9ca..03e33b7 100644
--- a/programs/fuzz/fuzz_server.c
+++ b/programs/fuzz/fuzz_server.c
@@ -199,7 +199,7 @@
 #if defined(MBEDTLS_X509_CRT_PARSE_C) && defined(MBEDTLS_PEM_PARSE_C)
     mbedtls_x509_crt_free(&srvcert);
     mbedtls_pk_free(&pkey);
-#endif /* (MBEDTLS_X509_CRT_PARSE_C) && defined(MBEDTLS_PEM_PARSE_C) */
+#endif /* MBEDTLS_X509_CRT_PARSE_C MBEDTLS_PEM_PARSE_C */
     mbedtls_ssl_free(&ssl);
     mbedtls_psa_crypto_free();
 #else /* MBEDTLS_SSL_SRV_C && MBEDTLS_ENTROPY_C && MBEDTLS_CTR_DRBG_C */

programs/fuzz/fuzz_x509crl.c

diff --git a/programs/fuzz/fuzz_x509crl.c b/programs/fuzz/fuzz_x509crl.c
index ae0f852..af50e25 100644
--- a/programs/fuzz/fuzz_x509crl.c
+++ b/programs/fuzz/fuzz_x509crl.c
@@ -21,7 +21,7 @@
     if (ret == 0) {
         ret = mbedtls_x509_crl_info((char *) buf, sizeof(buf) - 1, " ", &crl);
     }
-#else /* MBEDTLS_X509_REMOVE_INFO */
+#else /* !MBEDTLS_X509_REMOVE_INFO */
     ((void) ret);
     ((void) buf);
 #endif /* !MBEDTLS_X509_REMOVE_INFO */

programs/ssl/ssl_test_lib.h

diff --git a/programs/ssl/ssl_test_lib.h b/programs/ssl/ssl_test_lib.h
index fbb0eff..20dbe61 100644
--- a/programs/ssl/ssl_test_lib.h
+++ b/programs/ssl/ssl_test_lib.h
@@ -104,22 +104,7 @@
 mbedtls_time_t dummy_constant_time(mbedtls_time_t *time);
 #endif
 
-#if !defined(MBEDTLS_TEST_USE_PSA_CRYPTO_RNG)
-/* If MBEDTLS_TEST_USE_PSA_CRYPTO_RNG is defined, the SSL test programs will use
- * mbedtls_psa_get_random() rather than entropy+DRBG as a random generator.
- *
- * The constraints are:
- * - Without the entropy module, the PSA RNG is the only option.
- * - Without at least one of the DRBG modules, the PSA RNG is the only option.
- * - The PSA RNG does not support explicit seeding, so it is incompatible with
- *   the reproducible mode used by test programs.
- * - For good overall test coverage, there should be at least one configuration
- *   where the test programs use the PSA RNG while the PSA RNG is itself based
- *   on entropy+DRBG, and at least one configuration where the test programs
- *   do not use the PSA RNG even though it's there.
- */
 #define MBEDTLS_TEST_USE_PSA_CRYPTO_RNG
-#endif
 
 /** A context for random number generation (RNG).
  */