90   uint64_t leftover;       //   8 bytes  member
147   st->leftover = 0;  in CRYPTO_poly1305_init()
688     if ((st->leftover == 0) && (bytes > 32)) {  in CRYPTO_poly1305_update()
693       want = poly1305_min(32 - st->leftover, bytes);  in CRYPTO_poly1305_update()
694       OPENSSL_memcpy(st->buffer + st->leftover, m, want);  in CRYPTO_poly1305_update()
697       st->leftover += want;  in CRYPTO_poly1305_update()
698       if ((st->leftover < 32) || (bytes == 0)) {  in CRYPTO_poly1305_update()
702       st->leftover = 0;  in CRYPTO_poly1305_update()
708   if (st->leftover) {  in CRYPTO_poly1305_update()
709     want = poly1305_min(64 - st->leftover, bytes);  in CRYPTO_poly1305_update()
710     OPENSSL_memcpy(st->buffer + st->leftover, m, want);  in CRYPTO_poly1305_update()
713     st->leftover += want;  in CRYPTO_poly1305_update()
714     if (st->leftover < 64) {  in CRYPTO_poly1305_update()
718     st->leftover = 0;  in CRYPTO_poly1305_update()
730     OPENSSL_memcpy(st->buffer + st->leftover, m, bytes);  in CRYPTO_poly1305_update()
731     st->leftover += bytes;  in CRYPTO_poly1305_update()
737   size_t leftover = st->leftover;  in CRYPTO_poly1305_finish()  local
747     size_t consumed = poly1305_combine(st, m, leftover);  in CRYPTO_poly1305_finish()
748     leftover -= consumed;  in CRYPTO_poly1305_finish()
764   if (leftover < 16) {  in CRYPTO_poly1305_finish()
794   leftover -= 16;  in CRYPTO_poly1305_finish()
795   if (leftover >= 16) {  in CRYPTO_poly1305_finish()
801   if (!leftover) {  in CRYPTO_poly1305_finish()
805   m[leftover++] = 1;  in CRYPTO_poly1305_finish()
806   OPENSSL_memset(m + leftover, 0, 16 - leftover);  in CRYPTO_poly1305_finish()
807   leftover = 16;  in CRYPTO_poly1305_finish()