File 1651-crypto-FIPS-availability-was-not-checked-f... of Package erlang

Overview Repositories Revisions Requests Users Attributes Meta

File 1651-crypto-FIPS-availability-was-not-checked-for-aead-ci.patch of Package erlang (Revision f11a8876faa0a8240b9c8df85bc35eb2)

Currently displaying revision f11a8876faa0a8240b9c8df85bc35eb2 , Show latest

From 037aa8186d23f0a445592f8a5a78812e326df06c Mon Sep 17 00:00:00 2001
From: Hans Nilsson <hans@erlang.org>
Date: Wed, 10 Nov 2021 10:33:32 +0100
Subject: [PATCH] crypto: FIPS availability was not checked for aead ciphers

---
 lib/crypto/c_src/aead.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/crypto/c_src/aead.c b/lib/crypto/c_src/aead.c
index 8bbeb5bec4..b305117c64 100644
--- a/lib/crypto/c_src/aead.c
+++ b/lib/crypto/c_src/aead.c
@@ -92,6 +92,8 @@ ERL_NIF_TERM aead_cipher_nif(ErlNifEnv* env, int argc, const ERL_NIF_TERM argv[]
         {ret = EXCP_BADARG_N(env, 0, "Bad cipher"); goto done;}
     if (! (cipherp->flags & AEAD_CIPHER) )
         {ret = EXCP_BADARG_N(env, 0, "Not aead cipher"); goto done;}
+    if (CIPHER_FORBIDDEN_IN_FIPS(cipherp))
+        {ret = EXCP_NOTSUP_N(env, 0, "Forbidden in FIPS"); goto done;}
     if ((cipher = cipherp->cipher.p) == NULL)
         {ret = EXCP_NOTSUP_N(env, 0, "The cipher is not supported in this libcrypto version"); goto done;}
 
-- 
2.31.1

Places

File 1651-crypto-FIPS-availability-was-not-checked-for-aead-ci.patch of Package erlang (Revision f11a8876faa0a8240b9c8df85bc35eb2)

Places