import opencryptoki-3.17.0-5.el8_6

This commit is contained in:
CentOS Sources 2022-09-13 03:40:08 -04:00 committed by Stepan Oksanichenko
parent a7c2acab30
commit 094ff8f62a
2 changed files with 37 additions and 1 deletions

View File

@ -0,0 +1,32 @@
commit b545050b338e46c29936a2748aab7200e69a5c91
Author: Ingo Franzki <ifranzki@linux.ibm.com>
Date: Tue Jul 26 15:11:06 2022 +0200
EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL
For mixed card levels, the size query call and the call to obtain the
list may run on different cards. When the size query call runs on a
card with less mechanisms than the second call, will fail, but it
returns the larger larger number of mechanisms.
The code already re-allocates the buffer for retrieving the mechanism
list, but does not return the larger number in pulCount. This will
lead to a CKR_BUFFER_TOO_SMALL when the application calls C_GetMechanismList
again to obtain the list of mechanisms, because the applications buffer
is too small.
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
diff --git a/usr/lib/ep11_stdll/ep11_specific.c b/usr/lib/ep11_stdll/ep11_specific.c
index 8d796452..1629e664 100644
--- a/usr/lib/ep11_stdll/ep11_specific.c
+++ b/usr/lib/ep11_stdll/ep11_specific.c
@@ -8977,6 +8977,8 @@ CK_RV ep11tok_get_mechanism_list(STDLL_TokData_t * tokdata,
if (rc != CKR_BUFFER_TOO_SMALL)
goto out;
}
+ /* counter was updated in case of CKR_BUFFER_TOO_SMALL */
+ *pulCount = counter;
} while (rc == CKR_BUFFER_TOO_SMALL);
for (i = 0; i < counter; i++) {

View File

@ -1,7 +1,7 @@
Name: opencryptoki Name: opencryptoki
Summary: Implementation of the PKCS#11 (Cryptoki) specification v3.0 Summary: Implementation of the PKCS#11 (Cryptoki) specification v3.0
Version: 3.17.0 Version: 3.17.0
Release: 4%{?dist} Release: 5%{?dist}
License: CPL License: CPL
Group: System Environment/Base Group: System Environment/Base
URL: https://github.com/opencryptoki/opencryptoki URL: https://github.com/opencryptoki/opencryptoki
@ -16,6 +16,7 @@ Patch2: opencryptoki-1.17.0-p11sak.patch
Patch100: opencryptoki-3.17.0-unlock-globmutex-if-user-and-group-check-fail.patch Patch100: opencryptoki-3.17.0-unlock-globmutex-if-user-and-group-check-fail.patch
Patch101: 0001-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch Patch101: 0001-EP11-Dilithium-Specify-OID-of-key-strength-at-key-ge.patch
Patch102: 0002-EP11-Fix-host-library-version-query.patch Patch102: 0002-EP11-Fix-host-library-version-query.patch
Patch103: opencryptoki-3.18.0-returning_CKR_BUFFER_TOO_SMALL.patch
Requires(pre): coreutils Requires(pre): coreutils
Requires: (selinux-policy >= 3.14.3-70 if selinux-policy-targeted) Requires: (selinux-policy >= 3.14.3-70 if selinux-policy-targeted)
@ -343,6 +344,9 @@ fi
%changelog %changelog
* Wed Aug 03 2022 Than Ngo <than@redhat.com> - 3.17.0-5
- Resolves: #2114806, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL
* Fri Apr 15 2022 Than Ngo <than@redhat.com> - 3.17.0-4 * Fri Apr 15 2022 Than Ngo <than@redhat.com> - 3.17.0-4
- Resolves: #2069592, Dilithium support not available - Resolves: #2069592, Dilithium support not available