Accepting request 790238 from mozilla:Factory

OBS-URL: https://build.opensuse.org/request/show/790238 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/mozilla-nss?expand=0&rev=155
2020-04-04 10:05:24 +00:00 · 2020-04-04 10:05:24 +00:00 · 0c74453c3f
commit 0c74453c3f
parent 9b381f8d16 507c7ec45b
5 changed files with 78 additions and 6 deletions
--- a/mozilla-nss.changes
+++ b/mozilla-nss.changes
@ -1,3 +1,43 @@
+-------------------------------------------------------------------
+Tue Mar 31 15:14:11 UTC 2020 - Michel Normand <normand@linux.vnet.ibm.com>
+
+- Update previous patch nss-kremlin-ppc64le.patch
+  slightly modified to support also ppc64 (BE) versus initial
+  https://github.com/FStarLang/kremlin/issues/166
+
+-------------------------------------------------------------------
+Tue Mar 31 09:31:14 UTC 2020 - Martin Sirringhaus <martin.sirringhaus@suse.com>
+
+- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds  
+
+-------------------------------------------------------------------
+Mon Mar 30 13:35:25 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
+
+- update to NSS 3.51
+  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
+  * Correct swapped PKCS11 values of CKM_AES_CMAC and
+    CKM_AES_CMAC_GENERAL (bmo#1611209)
+  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
+  * Check if PPC __has_include(<sys/auxv.h>) (bmo#1614183)
+  * Fix a compilation error for ‘getFIPSEnv’ "defined but not used"
+    (bmo#1614786)
+  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
+    to avoid an incompatibility. (bmo#1615208)
+  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
+    to be null-terminated (bmo#1538980)
+  * Correct a warning for comparison of integers of different signs:
+    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
+    (bmo#1561337)
+  * Add test for mp_int clamping (bmo#1609751)
+  * Don't attempt to read the fips_enabled flag on the machine unless
+    NSS was built with FIPS enabled (bmo#1582169)
+  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
+  * Fix compiler warning in secsign.c (bmo#1617387)
+  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
+    (bmo#1618400)
+  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
+    AES-NI intrinsics (bmo#1610687)
+
 -------------------------------------------------------------------
 Tue Mar  3 21:13:38 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>

--- a/mozilla-nss.spec
+++ b/mozilla-nss.spec
@ -17,14 +17,14 @@
 #


-%global nss_softokn_fips_version 3.50
+%global nss_softokn_fips_version 3.51
 %define NSPR_min_version 4.25
 %define nspr_ver %(rpm -q --queryformat '%%{VERSION}' mozilla-nspr)
 %define nssdbdir %{_sysconfdir}/pki/nssdb
 Name:           mozilla-nss
-Version:        3.50
+Version:        3.51
 Release:        0
-%define underscore_version 3_50
+%define underscore_version 3_51
 Summary:        Network Security Services
 License:        MPL-2.0
 Group:          System/Libraries
@ -49,6 +49,7 @@ Patch4:         add-relro-linker-option.patch
 Patch5:         malloc.patch
 Patch6:         bmo-1400603.patch
 Patch7:         nss-sqlitename.patch
+Patch8:         nss-kremlin-ppc64le.patch
 BuildRequires:  gcc-c++
 BuildRequires:  pkgconfig
 BuildRequires:  pkgconfig(nspr) >= %{NSPR_min_version}
@ -179,6 +180,7 @@ cd nss
 %endif
 %patch6 -p1
 %patch7 -p1
+%patch8 -p1
 # additional CA certificates
 #cd security/nss/lib/ckfw/builtins
 #cat %{SOURCE2} >> certdata.txt
--- a/nss-3.50.tar.gz
+++ b/nss-3.50.tar.gz
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:185df319775243f5f5daa9d49b7f9cc5f2b389435be3247c3376579bee063ba7
-size 78041630
--- a/nss-3.51.tar.gz
+++ b/nss-3.51.tar.gz
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:75348b3b3229362486c57a880db917da1f96ef4eb639dc9cc2ff17d72268459c
+size 78305125
--- a/nss-kremlin-ppc64le.patch
+++ b/nss-kremlin-ppc64le.patch
@ -0,0 +1,30 @@
+Index: nss/lib/freebl/verified/kremlin/include/kremlin/internal/types.h
+===================================================================
+--- nss.orig/lib/freebl/verified/kremlin/include/kremlin/internal/types.h
+++ nss/lib/freebl/verified/kremlin/include/kremlin/internal/types.h
+@@ -56,7 +56,9 @@ typedef const char *Prims_string;
+ #include <emmintrin.h>
+ typedef __m128i FStar_UInt128_uint128;
+ #elif !defined(KRML_VERIFIED_UINT128) && !defined(_MSC_VER) && \
+-    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__))
+    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__) || \
+     defined(__powerpc64__) || \
+     defined(__s390x__))
+ typedef unsigned __int128 FStar_UInt128_uint128;
+ #else
+ typedef struct FStar_UInt128_uint128_s {
+Index: nss/lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar_uint128_gcc64.h
+===================================================================
+--- nss.orig/lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar_uint128_gcc64.h
+++ nss/lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar_uint128_gcc64.h
+@@ -25,7 +25,9 @@
+ #include "LowStar_Endianness.h"
+ 
+ #if !defined(KRML_VERIFIED_UINT128) && !defined(_MSC_VER) && \
+-    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__))
+    (defined(__x86_64__) || defined(__x86_64) || defined(__aarch64__) || \
+     defined(__powerpc64__) || \
+     defined(__s390x__))
+ 
+ /* GCC + using native unsigned __int128 support */
+