dladdr() in fips.c and --enable-hmac-binary-check and --enable-static

Werner Koch wk at gnupg.org
Wed Apr 6 15:59:39 CEST 2016

On Fri, 18 Mar 2016 02:09, burts at us.ibm.com said:
> One of our team members decided that he needed to create a program binary
> using static libraries, and he also decided to use the
> --enable-hmac-binary-check option. This combination of configure options
> will not work, because it exposes the dladdr() function call, and the

That option works only with glibc and shared objects - it was required
by a FIPS validated systems.  It is not portable.  I will add a source
comment to configure.ac to explain this.

> Can you eliminate the use of dladdr(), or come up with something that is
> less likely to trip up a novice? Perhaps it is ridiculous for him to be

Do not use features which are not described in README or in the manual



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

More information about the Gcrypt-devel mailing list