From a83587591212912d4df1675d13f66942d61bf757 Mon Sep 17 00:00:00 2001
From: Alexander Tsoy <puleglot@ya.ru>
Date: Sun, 11 Oct 2026 18:01:39 +0300
Subject: [PATCH] Fix build with NOSSE2 (#1891)

* Fix build with NOSSE2

Disable AESNI and SHANI code that depends on SSE2 availability if NOSSE2
is enabled.

* Fix NOSSE2 builds while preserving runtime AES acceleration

Keep AES/Camellia acceleration enabled and honor NOSSE2 with NOAESNI.
Include stddef.h outside UEFI to provide wchar_t for Camellia.
Match the SHA probe guard to its implementation, keeping NOASM and
UEFI exclusions.

---------

Co-authored-by: Mounir IDRASSI <mounir.idrassi@amcrypto.jp>
---
 src/Crypto/Camellia.c |  3 +++
 src/Crypto/cpu.c      |  4 ++--
 src/Makefile          | 17 +++++++++++------
 3 files changed, 16 insertions(+), 8 deletions(-)

diff --git a/src/Crypto/Camellia.c b/src/Crypto/Camellia.c
index fa6aaeb8..8791d0c5 100644
--- a/src/Crypto/Camellia.c
+++ b/src/Crypto/Camellia.c
@@ -45,6 +45,9 @@
 
 /* Adapted for VeraCrypt */
 
+#if !defined(_UEFI)
+#include <stddef.h>
+#endif
 #include "Common/Crypto.h"
 
 #ifndef _WIN32
diff --git a/src/Crypto/cpu.c b/src/Crypto/cpu.c
index 9cf05275..3934107d 100644
--- a/src/Crypto/cpu.c
+++ b/src/Crypto/cpu.c
@@ -290,9 +290,9 @@ static int Detect_MS_HyperV_AES ()
 
 #endif
 
-/* TrySHA256 lives in Sha2Intel.c, which omits it for _UEFI and CRYPTOPP_DISABLE_ASM */
+/* Keep this guard in sync with TrySHA256 in Sha2Intel.c. */
 #if !defined(_UEFI) && !defined(CRYPTOPP_DISABLE_ASM) && \
-	(defined(__SHA__) || defined(__INTEL_COMPILER) || CRYPTOPP_SHANI_AVAILABLE)
+	CRYPTOPP_SHANI_AVAILABLE
 #define TC_SHA256_PROBE_AVAILABLE
 extern int TrySHA256();
 #endif
diff --git a/src/Makefile b/src/Makefile
index d99a91fb..c3fb6a71 100644
--- a/src/Makefile
+++ b/src/Makefile
@@ -234,6 +234,14 @@ ifeq "$(shell uname -s)" "Linux"
 		LFLAGS += -Wl,-z,max-page-size=4096
 	endif
 	
+	# Keep NOAESNI consistent with assembler object selection even with NOSSE2.
+	ifneq (,$(filter x86 x64,$(CPU_ARCH)))
+		ifeq "$(DISABLE_AESNI)" "1"
+			CFLAGS += -mno-aes -DCRYPTOPP_DISABLE_AESNI
+			CXXFLAGS += -mno-aes -DCRYPTOPP_DISABLE_AESNI
+		endif
+	endif
+
 	ifeq "$(SIMD_SUPPORTED)" "1"
 		CFLAGS += -msse2
 		CXXFLAGS += -msse2
@@ -243,10 +251,7 @@ ifeq "$(shell uname -s)" "Linux"
 		GCC_GTEQ_470 := $(shell expr `$(CC) -dumpversion | sed -e 's/\.\([0-9][0-9]\)/\1/g' -e 's/\.\([0-9]\)/0\1/g' -e 's/^[0-9]\{3,4\}$$/&00/' -e 's/^[0-9]\{1,2\}$$/&0000/'` \>= 40700)
 		GCC_GTEQ_500 := $(shell expr `$(CC) -dumpversion | sed -e 's/\.\([0-9][0-9]\)/\1/g' -e 's/\.\([0-9]\)/0\1/g' -e 's/^[0-9]\{3,4\}$$/&00/' -e 's/^[0-9]\{1,2\}$$/&0000/'` \>= 50000)
 
-		ifeq "$(DISABLE_AESNI)" "1"
-			CFLAGS += -mno-aes -DCRYPTOPP_DISABLE_AESNI
-			CXXFLAGS += -mno-aes -DCRYPTOPP_DISABLE_AESNI
-		else
+		ifeq "$(DISABLE_AESNI)" "0"
 			ifeq "$(GCC_GTEQ_440)" "1"
 				CFLAGS += -maes
 				CXXFLAGS += -maes
@@ -289,8 +294,8 @@ ifeq "$(shell uname -s)" "Linux"
 	endif
 	
 	ifeq "$(origin NOSSE2)" "command line"
-		CFLAGS += -mno-sse2
-		CXXFLAGS += -mno-sse2
+		CFLAGS += -mno-sse2 -DCRYPTOPP_DISABLE_SHANI
+		CXXFLAGS += -mno-sse2 -DCRYPTOPP_DISABLE_SHANI
 		WXCONFIG_CFLAGS += -mno-sse2
 		WXCONFIG_CXXFLAGS += -mno-sse2
 	endif