1251         size_t padlen, i;  in mbedtls_ssl_encrypt_buf()  local
1261         padlen = transform->ivlen - (rec->data_len + 1) % transform->ivlen;  in mbedtls_ssl_encrypt_buf()
1262         if (padlen == transform->ivlen) {  in mbedtls_ssl_encrypt_buf()
1263             padlen = 0;  in mbedtls_ssl_encrypt_buf()
1267         if (post_avail < padlen + 1) {  in mbedtls_ssl_encrypt_buf()
1272         for (i = 0; i <= padlen; i++) {  in mbedtls_ssl_encrypt_buf()
1273             data[rec->data_len + i] = (unsigned char) padlen;  in mbedtls_ssl_encrypt_buf()
1276         rec->data_len += padlen + 1;  in mbedtls_ssl_encrypt_buf()
1277         post_avail -= padlen + 1;  in mbedtls_ssl_encrypt_buf()
1310                                   padlen + 1));  in mbedtls_ssl_encrypt_buf()
1492     size_t padlen = 0;  in mbedtls_ssl_decrypt_buf()  local
1911         padlen = data[rec->data_len - 1];  in mbedtls_ssl_decrypt_buf()
1916                 padlen + 1);  in mbedtls_ssl_decrypt_buf()
1918             padlen  = mbedtls_ct_size_if_else_0(ge, padlen);  in mbedtls_ssl_decrypt_buf()
1921             if (rec->data_len < transform->maclen + padlen + 1) {  in mbedtls_ssl_decrypt_buf()
1927                                           padlen + 1));  in mbedtls_ssl_decrypt_buf()
1932                 transform->maclen + padlen + 1);  in mbedtls_ssl_decrypt_buf()
1934             padlen  = mbedtls_ct_size_if_else_0(ge, padlen);  in mbedtls_ssl_decrypt_buf()
1937         padlen++;  in mbedtls_ssl_decrypt_buf()
1954         size_t const padding_idx = rec->data_len - padlen;  in mbedtls_ssl_decrypt_buf()
1965             const mbedtls_ct_condition_t b = mbedtls_ct_uint_eq(check[idx], padlen - 1);  in mbedtls_ssl_decrypt_buf()
1969         correct = mbedtls_ct_bool_and(mbedtls_ct_uint_eq(pad_count, padlen), correct);  in mbedtls_ssl_decrypt_buf()
1972         if (padlen > 0 && correct == MBEDTLS_CT_FALSE) {  in mbedtls_ssl_decrypt_buf()
1976         padlen = mbedtls_ct_size_if_else_0(correct, padlen);  in mbedtls_ssl_decrypt_buf()
1984         rec->data_len -= padlen;  in mbedtls_ssl_decrypt_buf()
2038         const size_t max_len = rec->data_len + padlen;  in mbedtls_ssl_decrypt_buf()