Accepting request 864615 from home:pluskalm:branches:security

- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails

OBS-URL: https://build.opensuse.org/request/show/864615
OBS-URL: https://build.opensuse.org/package/show/security/libfido2?expand=0&rev=37

7a17a4e9127fb6df6278f19396760e7d60a5862c.patch

@@ -1,27 +0,0 @@
-From 7a17a4e9127fb6df6278f19396760e7d60a5862c Mon Sep 17 00:00:00 2001
-From: pedro martelletto <pedro@ambientworks.net>
-Date: Wed, 9 Sep 2020 18:01:53 +0200
-Subject: [PATCH] add two casts to silence warnings on 32-bit
-
-add two casts to silence 'comparison is always false' warnings on
-32-bit platforms (gcc: -Werror=type-limits, clang:
--Wtautological-constant-out-of-range-compare); gh#210
----
- src/hid_linux.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/src/hid_linux.c b/src/hid_linux.c
-index 9788012..c554784 100644
---- a/src/hid_linux.c
-+++ b/src/hid_linux.c
-@@ -385,8 +385,8 @@ timespec_to_ms(const struct timespec *ts, int upper_bound)
- 	int64_t x;
- 	int64_t y;
- 
--	if (ts->tv_sec < 0 || ts->tv_sec > INT64_MAX / 1000LL ||
--	    ts->tv_nsec < 0 || ts->tv_nsec / 1000000LL > INT64_MAX)
-+	if (ts->tv_sec < 0 || (uint64_t)ts->tv_sec > INT64_MAX / 1000LL ||
-+	    ts->tv_nsec < 0 || (uint64_t)ts->tv_nsec / 1000000LL > INT64_MAX)
- 		return (upper_bound);
- 
- 	x = ts->tv_sec * 1000LL;

libfido2-1.5.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5990f923c9390fe1e6a00ba5d1d1f74030e7344b855e971d9fb7223e70ff3122
-size 407259

libfido2-1.6.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6aed47aafd22be49c38f9281fb88ccd08c98678d9b8c39cdc87d1bb3ea2c63e4
+size 413904

libfido2.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Wed Jan 20 09:46:41 UTC 2021 - Martin Pluskal <mpluskal@suse.com>
+
+- Update to version 1.6.0:
+  * Fix OpenSSL 1.0 and Cygwin builds.
+  * hid_linux: fix build on 32-bit systems.
+  * hid_osx: allow reads from spawned threads.
+  * Documentation and reliability fixes.
+  * New API calls:
+    + fido_cred_authdata_raw_len;
+    + fido_cred_authdata_raw_ptr;
+    + fido_cred_sigcount;
+    + fido_dev_get_uv_retry_count;
+    + fido_dev_supports_credman.
+  * Hardened Windows build.
+  * Native FreeBSD and NetBSD support.
+  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
+- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
+- Do not build examples as their build fails
+
 -------------------------------------------------------------------
 Tue Nov 17 17:59:21 UTC 2020 - Hans Petter Jansson <hpj@suse.com>
 

libfido2.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libfido2
 #
-# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -18,14 +18,13 @@
 
 %define sover  1
 Name:           libfido2
-Version:        1.5.0
+Version:        1.6.0
 Release:        0
 Summary:        FIDO U2F and FIDO 2.0 protocols
 License:        BSD-2-Clause
 URL:            https://developers.yubico.com/
 Source0:        https://developers.yubico.com/libfido2/Releases/%{name}-%{version}.tar.gz
 Source1:        https://developers.yubico.com/libfido2/Releases/%{name}-%{version}.tar.gz.sig
-Patch1:         7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
 BuildRequires:  cmake
 BuildRequires:  gcc-c++
 BuildRequires:  libopenssl-1_1-devel
@@ -76,13 +75,14 @@ BuildArch:      noarch
 This package contains the udev rules for FIDO2 compatible devices.
 
 %prep
-%autosetup -p1
+%autosetup
 
 %build
 %define __builder ninja
 %cmake \
     -DCBOR_LIBRARY_DIRS=%{_libdir} \
-    -DUSE_HIDAPI=0
+    -DUSE_HIDAPI=0 \
+    -DBUILD_EXAMPLES=OFF
 %cmake_build
 
 %install