From a901f2af587f9cb068e2fca6b62f324bdde471d8 Mon Sep 17 00:00:00 2001
From: Ed Maste <emaste@FreeBSD.org>
Date: Thu, 28 Oct 2021 16:27:10 -0400
Subject: [PATCH] libradius: fix WITHOUT_OPENSSL build

int alen is used only with SSL.

Reported by:	Michael Dexter, Build Option Survey
MFC after:	3 days
Fixes:		8d5c7813061d ("libradius: Fix input validation bugs")
Sponsored by:	The FreeBSD Foundation
---
 lib/libradius/radlib.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/libradius/radlib.c b/lib/libradius/radlib.c
index ce0c0ccf453a..dd65eda285cb 100644
--- a/lib/libradius/radlib.c
+++ b/lib/libradius/radlib.c
@@ -286,8 +286,9 @@ is_valid_request(struct rad_handle *h)
 	MD5_CTX ctx;
 	unsigned char md5[MD5_DIGEST_LENGTH];
 	const struct rad_server *srvp;
-	int alen, len;
+	int len;
 #ifdef WITH_SSL
+	int alen;
 	HMAC_CTX *hctx;
 	u_char resp[MSGSIZE], md[EVP_MAX_MD_SIZE];
 	u_int md_len;