Subject: Re: DIAGASSERT in cryptographic functions.
To: Luke Mewburn <lukem@cs.rmit.edu.au>
From: Bill Sommerfeld <sommerfeld@orchard.arlington.ma.us>
List: tech-userlevel
Date: 09/17/1999 08:40:54
    Depending on the routine, on[e] of the following should be done:

	* replace the return with abort().
	  The hash/md functions should probably have this done.


	* remove the /* XXXLUKEM */ comment; it's ok to return in this
	  case.  I effectively did this for functions which do stuff
	  like free a list; it really doesn't matter if the top-level
	  pointer is checked against NULL because the invoker doesn't
	  care anyway.

I think that depending on context, any of the following may also be
appropriate:

 * For functions which take pointer/length pairs, no longer flag
passing a NULL pointer with a length of zero as an error.

 * Remove the #ifdef _DIAGNOSTIC code entirely, since the hardware
will do adequate NULL pointer checks if the pointer is referenced.

					- Bill