125 	size_t out_len = 0;  in sm2_mbedtls_pke_decrypt()  local
212 	out_len = MIN(*dst_len, C2_len);  in sm2_mbedtls_pke_decrypt()
213 	for (i = 0; i < out_len; i++)  in sm2_mbedtls_pke_decrypt()
215 	*dst_len = out_len;  in sm2_mbedtls_pke_decrypt()
216 	if (out_len < C2_len) {  in sm2_mbedtls_pke_decrypt()
217 		eom = calloc(1, C2_len - out_len);  in sm2_mbedtls_pke_decrypt()
222 		for (i = out_len; i < C2_len; i++)  in sm2_mbedtls_pke_decrypt()
223 		       eom[i - out_len] = src[C1_len + i] ^ t[i];  in sm2_mbedtls_pke_decrypt()
237 	res = crypto_hash_update(ctx, dst, out_len);  in sm2_mbedtls_pke_decrypt()
240 	if (out_len < C2_len) {  in sm2_mbedtls_pke_decrypt()
241 		res = crypto_hash_update(ctx, eom, C2_len - out_len);  in sm2_mbedtls_pke_decrypt()