80   uint64_t leftover;       /*   8 bytes  */  member
184   st->leftover = 0;  in CRYPTO_poly1305_init()
720     if ((st->leftover == 0) && (bytes > 32)) {  in CRYPTO_poly1305_update()
725       want = poly1305_min(32 - st->leftover, bytes);  in CRYPTO_poly1305_update()
726       poly1305_block_copy(st->buffer + st->leftover, m, want);  in CRYPTO_poly1305_update()
729       st->leftover += want;  in CRYPTO_poly1305_update()
730       if ((st->leftover < 32) || (bytes == 0)) {  in CRYPTO_poly1305_update()
734       st->leftover = 0;  in CRYPTO_poly1305_update()
740   if (st->leftover) {  in CRYPTO_poly1305_update()
741     want = poly1305_min(64 - st->leftover, bytes);  in CRYPTO_poly1305_update()
742     poly1305_block_copy(st->buffer + st->leftover, m, want);  in CRYPTO_poly1305_update()
745     st->leftover += want;  in CRYPTO_poly1305_update()
746     if (st->leftover < 64) {  in CRYPTO_poly1305_update()
750     st->leftover = 0;  in CRYPTO_poly1305_update()
762     poly1305_block_copy(st->buffer + st->leftover, m, bytes);  in CRYPTO_poly1305_update()
763     st->leftover += bytes;  in CRYPTO_poly1305_update()
769   size_t leftover = st->leftover;  in CRYPTO_poly1305_finish()  local
779     size_t consumed = poly1305_combine(st, m, leftover);  in CRYPTO_poly1305_finish()
780     leftover -= consumed;  in CRYPTO_poly1305_finish()
796   if (leftover < 16) {  in CRYPTO_poly1305_finish()
826   leftover -= 16;  in CRYPTO_poly1305_finish()
827   if (leftover >= 16) {  in CRYPTO_poly1305_finish()
833   if (!leftover) {  in CRYPTO_poly1305_finish()
837   m[leftover++] = 1;  in CRYPTO_poly1305_finish()
838   poly1305_block_zero(m + leftover, 16 - leftover);  in CRYPTO_poly1305_finish()
839   leftover = 16;  in CRYPTO_poly1305_finish()