|
 |
040c39b |
diff -up libgcrypt-1.6.2/src/fips.c.use-fipscheck libgcrypt-1.6.2/src/fips.c
|
|
|
040c39b |
--- libgcrypt-1.6.2/src/fips.c.use-fipscheck 2014-08-21 14:50:39.000000000 +0200
|
|
|
040c39b |
+++ libgcrypt-1.6.2/src/fips.c 2014-09-26 11:42:20.999588282 +0200
|
|
 |
73dab95 |
@@ -578,23 +578,50 @@ run_random_selftests (void)
|
|
|
4b8542a |
return !!err;
|
|
|
4b8542a |
}
|
|
|
4b8542a |
|
|
|
73dab95 |
+#ifdef ENABLE_HMAC_BINARY_CHECK
|
|
|
4b8542a |
+static int
|
|
|
4b8542a |
+get_library_path(const char *libname, const char *symbolname, char *path, size_t pathlen)
|
|
|
4b8542a |
+{
|
|
|
4b8542a |
+ Dl_info info;
|
|
|
4b8542a |
+ void *dl, *sym;
|
|
|
4b8542a |
+ int rv = -1;
|
|
|
4b8542a |
+
|
|
|
4b8542a |
+ dl = dlopen(libname, RTLD_LAZY);
|
|
|
4b8542a |
+ if (dl == NULL) {
|
|
|
4b8542a |
+ return -1;
|
|
|
4b8542a |
+ }
|
|
|
4b8542a |
+
|
|
|
4b8542a |
+ sym = dlsym(dl, symbolname);
|
|
|
4b8542a |
+
|
|
|
4b8542a |
+ if (sym != NULL && dladdr(sym, &info)) {
|
|
|
4b8542a |
+ strncpy(path, info.dli_fname, pathlen-1);
|
|
|
4b8542a |
+ path[pathlen-1] = '\0';
|
|
|
4b8542a |
+ rv = 0;
|
|
|
4b8542a |
+ }
|
|
|
4b8542a |
+
|
|
|
4b8542a |
+ dlclose(dl);
|
|
|
4b8542a |
+
|
|
|
4b8542a |
+ return rv;
|
|
|
4b8542a |
+}
|
|
|
73dab95 |
+#endif
|
|
|
4b8542a |
+
|
|
|
4b8542a |
/* Run an integrity check on the binary. Returns 0 on success. */
|
|
|
4b8542a |
static int
|
|
|
4b8542a |
check_binary_integrity (void)
|
|
|
4b8542a |
{
|
|
|
4b8542a |
#ifdef ENABLE_HMAC_BINARY_CHECK
|
|
|
4b8542a |
gpg_error_t err;
|
|
|
4b8542a |
- Dl_info info;
|
|
|
4b8542a |
+ char libpath[4096];
|
|
|
4b8542a |
unsigned char digest[32];
|
|
|
4b8542a |
int dlen;
|
|
|
4b8542a |
char *fname = NULL;
|
|
|
4b8542a |
- const char key[] = "What am I, a doctor or a moonshuttle conductor?";
|
|
|
b505458 |
-
|
|
|
4b8542a |
- if (!dladdr ("gcry_check_version", &info))
|
|
|
b505458 |
+ const char key[] = "orboDeJITITejsirpADONivirpUkvarP";
|
|
|
b505458 |
+
|
|
|
85a7dd9 |
+ if (get_library_path ("libgcrypt.so.20", "gcry_check_version", libpath, sizeof(libpath)))
|
|
|
4b8542a |
err = gpg_error_from_syserror ();
|
|
|
4b8542a |
else
|
|
|
4b8542a |
{
|
|
|
4b8542a |
- dlen = _gcry_hmac256_file (digest, sizeof digest, info.dli_fname,
|
|
|
4b8542a |
+ dlen = _gcry_hmac256_file (digest, sizeof digest, libpath,
|
|
|
4b8542a |
key, strlen (key));
|
|
|
4b8542a |
if (dlen < 0)
|
|
|
4b8542a |
err = gpg_error_from_syserror ();
|
|
|
73dab95 |
@@ -602,7 +629,7 @@ check_binary_integrity (void)
|
|
|
4b8542a |
err = gpg_error (GPG_ERR_INTERNAL);
|
|
|
4b8542a |
else
|
|
|
4b8542a |
{
|
|
|
040c39b |
- fname = xtrymalloc (strlen (info.dli_fname) + 1 + 5 + 1 );
|
|
|
040c39b |
+ fname = xtrymalloc (strlen (libpath) + 1 + 5 + 1 );
|
|
|
4b8542a |
if (!fname)
|
|
|
4b8542a |
err = gpg_error_from_syserror ();
|
|
|
4b8542a |
else
|
|
|
73dab95 |
@@ -611,7 +638,7 @@ check_binary_integrity (void)
|
|
|
4b8542a |
char *p;
|
|
|
4b8542a |
|
|
|
4b8542a |
/* Prefix the basename with a dot. */
|
|
|
4b8542a |
- strcpy (fname, info.dli_fname);
|
|
|
4b8542a |
+ strcpy (fname, libpath);
|
|
|
4b8542a |
p = strrchr (fname, '/');
|
|
|
4b8542a |
if (p)
|
|
|
4b8542a |
p++;
|
|
|
040c39b |
diff -up libgcrypt-1.6.2/src/Makefile.in.use-fipscheck libgcrypt-1.6.2/src/Makefile.in
|
|
|
040c39b |
--- libgcrypt-1.6.2/src/Makefile.in.use-fipscheck 2014-08-21 15:14:08.000000000 +0200
|
|
|
040c39b |
+++ libgcrypt-1.6.2/src/Makefile.in 2014-09-26 11:41:13.271059281 +0200
|
|
|
040c39b |
@@ -449,7 +449,7 @@ libgcrypt_la_LIBADD = $(gcrypt_res) \
|
|
|
e569e43 |
../cipher/libcipher.la \
|
|
|
e569e43 |
../random/librandom.la \
|
|
|
e569e43 |
../mpi/libmpi.la \
|
|
|
b505458 |
- ../compat/libcompat.la $(GPG_ERROR_LIBS)
|
|
|
b505458 |
+ ../compat/libcompat.la $(GPG_ERROR_LIBS) -ldl
|
|
|
e569e43 |
|
|
|
e569e43 |
dumpsexp_SOURCES = dumpsexp.c
|
|
|
b505458 |
dumpsexp_CFLAGS = $(arch_gpg_error_cflags)
|