pool/mozilla-nss
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/mozilla:Factory/mozilla-nss?expand=0&rev=461
This commit is contained in:
Wolfgang Rosenauer 2024-09-29 13:54:16 +00:00 committed by Git OBS Bridge
parent 936027472f
commit cd8891d66e
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
mozilla-nss.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Sun Sep 29 10:12:09 UTC 2024 - ecsos <ecsos@opensuse.org>
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
-------------------------------------------------------------------
Sat Sep 28 11:12:23 UTC 2024 - Wolfgang Rosenauer <wr@rosenauer.org>

8
nss-fips-safe-memset.patch
View File

@ -277,7 +277,7 @@ Index: nss/lib/freebl/rijndael.c
===================================================================
--- nss.orig/lib/freebl/rijndael.c
+++ nss/lib/freebl/rijndael.c
@@ -1114,7 +1114,7 @@ AES_DestroyContext(AESContext *cx, PRBoo
@@ -1251,7 +1251,7 @@ AES_DestroyContext(AESContext *cx, PRBoo
cx->worker_cx = NULL;
cx->destroy = NULL;
}
@ -445,7 +445,7 @@ Index: nss/lib/softoken/pkcs11c.c
===================================================================
--- nss.orig/lib/softoken/pkcs11c.c
+++ nss/lib/softoken/pkcs11c.c
@@ -4994,7 +4994,7 @@ pairwise_signverify_mech (CK_SESSION_HAN
@@ -5105,7 +5105,7 @@ pairwise_signverify_mech (CK_SESSION_HAN
if ((signature_length >= pairwise_digest_length) &&
(PORT_Memcmp(known_digest, signature + (signature_length - pairwise_digest_length), pairwise_digest_length) == 0)) {
PORT_Free(signature);
@ -468,8 +468,8 @@ Index: nss/lib/util/secport.h
#include <string.h>
#include <stddef.h>
#include <stdlib.h>
@@ -182,6 +185,39 @@ SEC_END_PROTOS
#endif /*SUNOS4*/
@@ -178,6 +181,39 @@ SEC_END_PROTOS
#define PORT_Memmove memmove
#define PORT_Memset memset
+/* there are cases where the compiler optimizes away our attempt to clear