Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

20230711-linuxkm-fixes #6604

Merged
merged 1 commit into from
Jul 12, 2023

Conversation

douzzer
Copy link
Contributor

@douzzer douzzer commented Jul 12, 2023

configure.ac:

if ENABLED_LINUXKM_PIE, add -DWOLFSSL_NO_OCSP_ISSUER_CHECK to gate out backward dependency in asn.c;

if ENABLE_LINUXKM, don't error on FIPS without thread_ls_on;

for --enable-curl, set ENABLED_MD4="yes", and move --enable-md4 AC_ARG_ENABLE() clause up to a position adjacent to des3 handling;

scripts/sniffer-gen.sh: fix illegal exit code (SC2242);

src/internal.c: fix clang-analyzer-core.NonNullParamChecker in CreateTicket();

src/ocsp.c: fix readability-redundant-preprocessor;

src/tls.c: fix empty-body in TLSX_PskKeModes_Parse() and clang-diagnostic-unreachable-code-break in ALPN_Select();

tests/api.c: fix several clang-analyzer-core.NullDereference related to Expect*() refactor;

wolfcrypt/src/asn.c:

fix -Wconversions in DecodeAuthKeyId() and ParseCertRelative();

fix readability-redundant-declaration re GetCA() and GetCAByName();

gate inclusion of wolfssl/internal.h on !defined(WOLFCRYPT_ONLY);

wolfssl/internal.h: add macro-detection gating around GetCA() and GetCAByName() prototypes matching gates in wolfcrypt/src/asn.c;

tests/utils.c: in create_tmp_dir(), use one-arg variant of mkdir() if defined(__CYGWIN__) || defined(__MINGW32__).

tested with wolfssl-multi-test.sh ... super-quick-check check-shell-scripts all-c89-clang-tidy defaults-cryptonly-Wconversion-intelasm-build defaults-cryptonly-Wconversion-intelasm-fips-140-3-dev-build defaults-cryptonly-Wconversion-noasm-fips-140-3-dev-build defaults-cryptonly-Wconversion-noasm-fips-140-3-dev-m32-build allcryptonly-Wconversion-intelasm-build defaults-cryptonly-c99-Wconversion-build allcryptonly-c99-Wconversion-build defaults-cryptonly-c99-Wconversion-m32-build allcryptonly-c99-Wconversion-m32-build defaults-cryptonly-c89-Wconversion-build defaults-cryptonly-c89-Wconversion-m32-build allcryptonly-c89-Wconversion-build allcryptonly-c89-Wconversion-m32-build cross-amd64-mingw-all-crypto-Wconversion cross-mingw-all-crypto pq-benchmark-build linuxkm-all-fips-140-3 linuxkm-all-fips-140-3-dyn-hash linuxkm-all-fips-140-3-dev-dyn-hash linuxkm-defaults-all-fips-140-3 linuxkm-defaults-all-no-asm all-crypto-linuxkm-defaults-max-func-stack-2k-build all-crypto-linuxkm-defaults-max-func-stack-2k-build-fips all-linuxkm-defaults-max-total-stack-8k all-linuxkm-defaults-max-total-stack-8k-fips all-linuxkm-defaults-error-code-openssl linuxkm linuxkm-pie linuxkm-legacy-3.16 linuxkm-legacy-4.4 linuxkm-legacy-4.9 linuxkm-legacy-5.4 linuxkm-legacy-5.10 linuxkm-legacy-5.15 linuxkm-legacy-6.1 linuxkm-mainline-pie linuxkm-mainline-pie-gcc-latest clang-tidy-asn-template-sp-all-small-stack all-WOLFSSL_CALLBACKS-clang-tidy clang-tidy-Customer-CFG-7 clang-tidy-defaults clang-tidy-intmath clang-tidy-all-sp-all clang-tidy-all-intelasm clang-tidy-all-async-quic clang-tidy-fips-140-3-defaults clang-tidy-fips-140-3-all clang-tidy-fips-140-3-dev-defaults clang-tidy-fips-140-3-dev-defaults-no-sha-1 clang-tidy-fips-140-3-dev-all clang-tidy-fips-140-3-dev-all-crypto-no-sha-1 clang-tidy-all-crypto-no-sha-1 curl-with-wolfssl

  if ENABLED_LINUXKM_PIE, add -DWOLFSSL_NO_OCSP_ISSUER_CHECK to gate out backward dependency in asn.c;

  if ENABLE_LINUXKM, don't error on FIPS without thread_ls_on;

  for --enable-curl, set ENABLED_MD4="yes", and move --enable-md4 AC_ARG_ENABLE() clause up to a position adjacent to des3 handling;

scripts/sniffer-gen.sh: fix illegal exit code (SC2242);

src/internal.c: fix clang-analyzer-core.NonNullParamChecker in CreateTicket();

src/ocsp.c: fix readability-redundant-preprocessor;

src/tls.c: fix empty-body in TLSX_PskKeModes_Parse() and clang-diagnostic-unreachable-code-break in ALPN_Select();

tests/api.c: fix several clang-analyzer-core.NullDereference related to Expect*() refactor;

wolfcrypt/src/asn.c:

  fix -Wconversions in DecodeAuthKeyId() and ParseCertRelative();

  fix readability-redundant-declaration re GetCA() and GetCAByName();

  gate inclusion of wolfssl/internal.h on !defined(WOLFCRYPT_ONLY);

wolfssl/internal.h: add macro-detection gating around GetCA() and GetCAByName() prototypes matching gates in wolfcrypt/src/asn.c;

tests/utils.c: in create_tmp_dir(), use one-arg variant of mkdir() if defined(__CYGWIN__) || defined(__MINGW32__).
@JacobBarthelmeh JacobBarthelmeh merged commit 62c14e4 into wolfSSL:master Jul 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants