[gnutls-devel] GnuTLS | restrict allowlisting api to before priority string initialization (!1533)

[Read-only notification of GnuTLS library development activities]

Alexander Sosedkin commented on a discussion on lib/priority.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1533#note_1064851276

> + * the setting is modified with a prior call to this function.
> + *
> + * Since: 3.7.3
> + */
> +int
> +gnutls_digest_set_secure(gnutls_digest_algorithm_t dig, unsigned int secure)
> +{
> +#ifndef DISABLE_SYSTEM_CONFIG
> +	int ret;
> +	ret = gnutls_rwlock_wrlock(&system_wide_config_rwlock);
> +	if (ret < 0) {
> +		(void)gnutls_rwlock_unlock(&system_wide_config_rwlock);
> +		return gnutls_assert_val(ret);
> +	}
> +	ret = system_wide_config_is_malleable();
> +	if (ret != 1) {

`if (!system_wide_config_is_malleable()) {`

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1533#note_1064851276
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20220815/3da7f30b/attachment-0001.html>