forked from pool/libgcrypt
9a7cde5372
- FIPS: libgcrypt: Double free in test_keys() on failed signature
verification [bsc#1169944]
* Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
* libgcrypt-PCT-DSA.patch
* libgcrypt-PCT-RSA.patch
* libgcrypt-PCT-ECC.patch
- Ship the FIPS checksum file in the shared library package and
create a separate trigger file for the FIPS selftests (bsc#1169569)
* add libgcrypt-fips_selftest_trigger_file.patch
* refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
by libgcrypt-global_init-constructor.patch
- FIPS: Verify that the generated signature and the original input
differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
assembling the Q point from affine coordinates.
- Refreshed patches:
* libgcrypt-PCT-DSA.patch
* libgcrypt-PCT-RSA.patch
* libgcrypt-PCT-ECC.patch
- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
* Patches for DSA, RSA and ECDSA test_keys functions:
- libgcrypt-PCT-DSA.patch
- libgcrypt-PCT-RSA.patch
- libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch
OBS-URL: https://build.opensuse.org/request/show/805624
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libgcrypt?expand=0&rev=134
17 lines
613 B
Diff
17 lines
613 B
Diff
Index: libgcrypt-1.8.2/src/global.c
|
|
===================================================================
|
|
--- libgcrypt-1.8.2.orig/src/global.c
|
|
+++ libgcrypt-1.8.2/src/global.c
|
|
@@ -140,8 +140,9 @@ global_init (void)
|
|
/* We always need the FSM lock to be functional. */
|
|
_gcry_initialize_fsm_lock ();
|
|
|
|
- /* Run the self-tests from the constructor. */
|
|
- global_init ();
|
|
+ /* We run the integrity check at this point. The remaining
|
|
+ selftests are run before use of the library by application. */
|
|
+ _gcry_fips_run_selftests (0);
|
|
}
|
|
|
|
/* This function is called by the macro fips_is_operational and makes
|