Accepting request 833322 from home:namtrac:branches:security

- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.

- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.

OBS-URL: https://build.opensuse.org/request/show/833322
OBS-URL: https://build.opensuse.org/package/show/security/libfido2?expand=0&rev=33

7a17a4e9127fb6df6278f19396760e7d60a5862c.patch

@@ -0,0 +1,27 @@
+From 7a17a4e9127fb6df6278f19396760e7d60a5862c Mon Sep 17 00:00:00 2001
+From: pedro martelletto <pedro@ambientworks.net>
+Date: Wed, 9 Sep 2020 18:01:53 +0200
+Subject: [PATCH] add two casts to silence warnings on 32-bit
+
+add two casts to silence 'comparison is always false' warnings on
+32-bit platforms (gcc: -Werror=type-limits, clang:
+-Wtautological-constant-out-of-range-compare); gh#210
+---
+ src/hid_linux.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/hid_linux.c b/src/hid_linux.c
+index 9788012..c554784 100644
+--- a/src/hid_linux.c
++++ b/src/hid_linux.c
+@@ -385,8 +385,8 @@ timespec_to_ms(const struct timespec *ts, int upper_bound)
+ 	int64_t x;
+ 	int64_t y;
+ 
+-	if (ts->tv_sec < 0 || ts->tv_sec > INT64_MAX / 1000LL ||
+-	    ts->tv_nsec < 0 || ts->tv_nsec / 1000000LL > INT64_MAX)
++	if (ts->tv_sec < 0 || (uint64_t)ts->tv_sec > INT64_MAX / 1000LL ||
++	    ts->tv_nsec < 0 || (uint64_t)ts->tv_nsec / 1000000LL > INT64_MAX)
+ 		return (upper_bound);
+ 
+ 	x = ts->tv_sec * 1000LL;

libfido2-1.4.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ad921fbe7d4bb70e4a971e564cd01f341daf9b5ed5d69b3cbab94a8a811d2a6c
-size 391439

libfido2-1.5.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5990f923c9390fe1e6a00ba5d1d1f74030e7344b855e971d9fb7223e70ff3122
+size 407259

libfido2.changes

@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Wed Sep  9 13:33:47 UTC 2020 - Ismail Dönmez <idonmez@suse.com>
+
+- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
+  to fix 32bit compilation issues.
+
+-------------------------------------------------------------------
+Tue Sep  1 11:17:49 UTC 2020 - Ismail Dönmez <idonmez@suse.com>
+
+- Update to version 1.5.0
+  * hid_linux: return FIDO_OK if no devices are found.
+  * hid_osx:
+    + repair communication with U2F tokens, gh#166;
+    + reliability fixes.
+  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
+  * Support for configurable report lengths.
+  * New API calls:
+    + fido_cbor_info_maxcredcntlst
+    + fido_cbor_info_maxcredidlen
+    + fido_cred_aaguid_len
+    + fido_cred_aaguid_ptr
+    + fido_dev_get_touch_begin
+    + fido_dev_get_touch_status
+  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
+  * Allow CTAP messages up to 2048 bytes; gh#171.
+  * Ensure we only list USB devices by default.
+
 -------------------------------------------------------------------
 Fri Jul 24 19:33:15 UTC 2020 - Stefan Brüns <stefan.bruens@rwth-aachen.de>
 

libfido2.spec

@@ -18,13 +18,14 @@
 
 %define sover  1
 Name:           libfido2
-Version:        1.4.0
+Version:        1.5.0
 Release:        0
 Summary:        FIDO U2F and FIDO 2.0 protocols
 License:        BSD-2-Clause
 URL:            https://developers.yubico.com/
 Source0:        https://developers.yubico.com/libfido2/Releases/%{name}-%{version}.tar.gz
 Source1:        https://developers.yubico.com/libfido2/Releases/%{name}-%{version}.tar.gz.sig
+Patch1:         7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
 BuildRequires:  cmake
 BuildRequires:  gcc-c++
 BuildRequires:  libopenssl-1_1-devel
@@ -73,7 +74,7 @@ BuildArch:      noarch
 This package contains the udev rules for FIDO2 compatible devices.
 
 %prep
-%setup -q
+%autosetup -p1
 
 %build
 %define __builder ninja