[gnutls-devel] GnuTLS | Fix FIPS integrity self tests (!873)
Development of GNU's TLS library
gnutls-devel at lists.gnutls.org
Fri Jan 11 15:37:21 CET 2019
New Merge Request !873
https://gitlab.com/gnutls/gnutls/merge_requests/873
Project:Branches: ansasaki/gnutls:fix_fips_lib_name to gnutls/gnutls:master
Author: Anderson Sasaki
Assignee:
Add a description of the new feature/bug fix. Reference any relevant bugs.
This is a fix for a bug originally reported here: https://bugzilla.redhat.com/show_bug.cgi?id=1665061
There were 2 issues:
* The libraries names in libs/fips.c have not been updated when the sonames were bumped:
```
libgnutls.so.28 -> libgnutls.so.30
libnettle.so.4 -> libnettle.so.6
libhogweed.so.2 -> libhogweed.so.4
```
* The decoding of the HMAC fails when there is a '\n' at the end of the file. The newline makes the file to hold 65 bytes instead of the expected 64 bytes. At the end of the processing (lib/extras/hex.c:39) it checks if all input bytes were processed, but the last remaining byte makes the check to fail. This is not exactly a bug, but allowing newlines at the end of the file makes the format of the accepted files more flexible, and the integrity check more robust.
## Checklist
* [x] Code modified for feature
* [ ] Test suite updated with functionality tests
* [ ] Test suite updated with negative tests
* [ ] Documentation updated / NEWS entry present (for non-trivial changes)
## Reviewer's checklist:
* [ ] Any issues marked for closing are addressed
* [ ] There is a test suite reasonably covering new functionality or modifications
* [ ] Function naming, parameters, return values, types, etc., are consistent and according to `CONTRIBUTION.md`
* [ ] This feature/change has adequate documentation added
* [ ] No obvious mistakes in the code
--
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/873
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190111/479f370a/attachment.html>
More information about the Gnutls-devel
mailing list