From 1bc40124d6f2ca98deecfe3adcc67800e9da605a82d4d2c6ebbb908b2a1c9d8b Mon Sep 17 00:00:00 2001 From: Robert Frohl Date: Thu, 21 Jan 2021 10:10:55 +0000 Subject: [PATCH] Accepting request 864615 from home:pluskalm:branches:security - Update to version 1.6.0: * Fix OpenSSL 1.0 and Cygwin builds. * hid_linux: fix build on 32-bit systems. * hid_osx: allow reads from spawned threads. * Documentation and reliability fixes. * New API calls: + fido_cred_authdata_raw_len; + fido_cred_authdata_raw_ptr; + fido_cred_sigcount; + fido_dev_get_uv_retry_count; + fido_dev_supports_credman. * Hardened Windows build. * Native FreeBSD and NetBSD support. * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect. - Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch - Do not build examples as their build fails OBS-URL: https://build.opensuse.org/request/show/864615 OBS-URL: https://build.opensuse.org/package/show/security/libfido2?expand=0&rev=37 --- ...a4e9127fb6df6278f19396760e7d60a5862c.patch | 27 ------------------ libfido2-1.5.0.tar.gz | 3 -- libfido2-1.5.0.tar.gz.sig | Bin 310 -> 0 bytes libfido2-1.6.0.tar.gz | 3 ++ libfido2-1.6.0.tar.gz.sig | Bin 0 -> 310 bytes libfido2.changes | 20 +++++++++++++ libfido2.spec | 10 +++---- 7 files changed, 28 insertions(+), 35 deletions(-) delete mode 100644 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch delete mode 100644 libfido2-1.5.0.tar.gz delete mode 100644 libfido2-1.5.0.tar.gz.sig create mode 100644 libfido2-1.6.0.tar.gz create mode 100644 libfido2-1.6.0.tar.gz.sig diff --git a/7a17a4e9127fb6df6278f19396760e7d60a5862c.patch b/7a17a4e9127fb6df6278f19396760e7d60a5862c.patch deleted file mode 100644 index 9ba28b8..0000000 --- a/7a17a4e9127fb6df6278f19396760e7d60a5862c.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 7a17a4e9127fb6df6278f19396760e7d60a5862c Mon Sep 17 00:00:00 2001 -From: pedro martelletto -Date: Wed, 9 Sep 2020 18:01:53 +0200 -Subject: [PATCH] add two casts to silence warnings on 32-bit - -add two casts to silence 'comparison is always false' warnings on -32-bit platforms (gcc: -Werror=type-limits, clang: --Wtautological-constant-out-of-range-compare); gh#210 ---- - src/hid_linux.c | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/src/hid_linux.c b/src/hid_linux.c -index 9788012..c554784 100644 ---- a/src/hid_linux.c -+++ b/src/hid_linux.c -@@ -385,8 +385,8 @@ timespec_to_ms(const struct timespec *ts, int upper_bound) - int64_t x; - int64_t y; - -- if (ts->tv_sec < 0 || ts->tv_sec > INT64_MAX / 1000LL || -- ts->tv_nsec < 0 || ts->tv_nsec / 1000000LL > INT64_MAX) -+ if (ts->tv_sec < 0 || (uint64_t)ts->tv_sec > INT64_MAX / 1000LL || -+ ts->tv_nsec < 0 || (uint64_t)ts->tv_nsec / 1000000LL > INT64_MAX) - return (upper_bound); - - x = ts->tv_sec * 1000LL; diff --git a/libfido2-1.5.0.tar.gz b/libfido2-1.5.0.tar.gz deleted file mode 100644 index 952c72b..0000000 --- a/libfido2-1.5.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5990f923c9390fe1e6a00ba5d1d1f74030e7344b855e971d9fb7223e70ff3122 -size 407259 diff --git a/libfido2-1.5.0.tar.gz.sig b/libfido2-1.5.0.tar.gz.sig deleted file mode 100644 index 1d359f59df628ca9ec5dc9d74e19347299a24cb791309444f68b0ac4a1f45cf8..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 310 zcmV-60m=S}0W$;u0SEvc79j+8E-A&_D(QCloTZg9yx|r<*=gAY0$);QZvYAj5HY;r z7C+f(*%)L90Iy4T$Hm_5h*gU~Yd-erB%Y5d7ArPcR!^voqC?NX_Hf4GN9K0NCpWn6 zfC9RJgzuoz>UCB2!nkt^iVlU$12HRgsW6n78_v!Oy3OKDHKHJ)2_#_S%y$uy8tu8YQ^&@IyyHjFinXhng}ya%rvTiAeqR^eel I#6DQyU)3Fvod5s; diff --git a/libfido2-1.6.0.tar.gz b/libfido2-1.6.0.tar.gz new file mode 100644 index 0000000..1866f6c --- /dev/null +++ b/libfido2-1.6.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:6aed47aafd22be49c38f9281fb88ccd08c98678d9b8c39cdc87d1bb3ea2c63e4 +size 413904 diff --git a/libfido2-1.6.0.tar.gz.sig b/libfido2-1.6.0.tar.gz.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..6e30f2812194faa584cc647b63ab284f91a18260ac3637a845df725f207fd583 GIT binary patch literal 310 zcmV-60m=S}0W$;u0SEvc79j+8E-A&_D(QCloTZg9yx|r<*=gAY0$=>*3IGZT5HY;r z7C+f(*?O4={U4(h_Eo+QP7zB%rRWYBxc2Sj@T^+h;%<#{R~#v8n*6YlEBUxn=sg&5 zB6m%?z;j$vT~~|hMkuy-BKH7fkl6f071k6)8c_eMwx=&R9UVl73J-K9#N+?WEdbEr zd0cxtV=#RO2eM+E-#wn$LnoRMMMDJAY#9WQx0Y9d1Fm5d_`>$Q3(tx}2lB2Kivf26 z&N#mhz_iJmQufi^3H9zkaXdXrt)7!Va%UL{j%NET+nc|?_WZ^1M@SMb z9;b+`2>9)LBsX@V$jh`905cm}bUQ@J@fQo;9bvFJeojTL(l_x`Dpw(olKO!OKW8px Ik@}3s7IK@6=l}o! literal 0 HcmV?d00001 diff --git a/libfido2.changes b/libfido2.changes index e31bb44..10df92c 100644 --- a/libfido2.changes +++ b/libfido2.changes @@ -1,3 +1,23 @@ +------------------------------------------------------------------- +Wed Jan 20 09:46:41 UTC 2021 - Martin Pluskal + +- Update to version 1.6.0: + * Fix OpenSSL 1.0 and Cygwin builds. + * hid_linux: fix build on 32-bit systems. + * hid_osx: allow reads from spawned threads. + * Documentation and reliability fixes. + * New API calls: + + fido_cred_authdata_raw_len; + + fido_cred_authdata_raw_ptr; + + fido_cred_sigcount; + + fido_dev_get_uv_retry_count; + + fido_dev_supports_credman. + * Hardened Windows build. + * Native FreeBSD and NetBSD support. + * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect. +- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch +- Do not build examples as their build fails + ------------------------------------------------------------------- Tue Nov 17 17:59:21 UTC 2020 - Hans Petter Jansson diff --git a/libfido2.spec b/libfido2.spec index 9d04996..b09773e 100644 --- a/libfido2.spec +++ b/libfido2.spec @@ -1,7 +1,7 @@ # # spec file for package libfido2 # -# Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,14 +18,13 @@ %define sover 1 Name: libfido2 -Version: 1.5.0 +Version: 1.6.0 Release: 0 Summary: FIDO U2F and FIDO 2.0 protocols License: BSD-2-Clause URL: https://developers.yubico.com/ Source0: https://developers.yubico.com/libfido2/Releases/%{name}-%{version}.tar.gz Source1: https://developers.yubico.com/libfido2/Releases/%{name}-%{version}.tar.gz.sig -Patch1: 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch BuildRequires: cmake BuildRequires: gcc-c++ BuildRequires: libopenssl-1_1-devel @@ -76,13 +75,14 @@ BuildArch: noarch This package contains the udev rules for FIDO2 compatible devices. %prep -%autosetup -p1 +%autosetup %build %define __builder ninja %cmake \ -DCBOR_LIBRARY_DIRS=%{_libdir} \ - -DUSE_HIDAPI=0 + -DUSE_HIDAPI=0 \ + -DBUILD_EXAMPLES=OFF %cmake_build %install