PR/58039 CVS commit: [netbsd-9] src

["Martin Husemann" <martin%netbsd.org@localhost>]

The following reply was made to PR lib/58039; it has been noted by GNATS.

From: "Martin Husemann" <martin%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/58039 CVS commit: [netbsd-9] src
Date: Mon, 25 Mar 2024 14:26:16 +0000

 Module Name:	src
 Committed By:	martin
 Date:		Mon Mar 25 14:26:16 UTC 2024
 
 Modified Files:
 	src/crypto/external/bsd/openssl/dist/crypto/evp [netbsd-9]: m_sha1.c
 	src/crypto/external/bsd/openssl/dist/include/crypto [netbsd-9]: sha.h
 	src/crypto/external/bsd/openssl/lib/libcrypto [netbsd-9]: libc-sha2xx.c
 	src/distrib/sets/lists/debug [netbsd-9]: mi
 	src/distrib/sets/lists/tests [netbsd-9]: mi
 	src/tests/crypto/libcrypto [netbsd-9]: Makefile
 Added Files:
 	src/tests/crypto/libcrypto [netbsd-9]: t_sha512trunc.c
 
 Log Message:
 Pull up following revision(s) (requested by riastradh in ticket #1819):
 
 	crypto/external/bsd/openssl/dist/providers/implementations/digests/sha2_prov.c: revision 1.2
 	  (applied to crypto/external/bsd/openssl/dist/crypto/evp/m_sha1.c)
 	tests/crypto/libcrypto/t_sha512trunc.c: revision 1.1
 	tests/crypto/libcrypto/t_sha512trunc.c: revision 1.2
 	tests/crypto/libcrypto/Makefile: revision 1.16
 	distrib/sets/lists/tests/mi: revision 1.1311
 	distrib/sets/lists/debug/mi: revision 1.430
 	crypto/external/bsd/openssl/dist/include/crypto/sha.h: revision 1.2
 	crypto/external/bsd/openssl/lib/libcrypto/libc-sha2xx.c: revision 1.4
 	(all via patch)
 
 libcrypto: Add some trivial tests for truncated SHA-512 variants.
 These should use more of the test vectors from
 https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing#Testing
 but this will do for now to detect the buffer overrun rake we left
 lying around for ourselves.
 PR lib/58039
 
 libcrypto: Fix buffer overrun in truncated SHA-512 functions.
 Further fallout from the libc/openssl sha2 symbol collision.
 PR lib/58039
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.11.2.1 -r1.11.2.2 \
     src/crypto/external/bsd/openssl/dist/crypto/evp/m_sha1.c
 cvs rdiff -u -r1.1.1.1.4.2 -r1.1.1.1.4.3 \
     src/crypto/external/bsd/openssl/dist/include/crypto/sha.h
 cvs rdiff -u -r1.1.6.1 -r1.1.6.2 \
     src/crypto/external/bsd/openssl/lib/libcrypto/libc-sha2xx.c
 cvs rdiff -u -r1.285.2.6 -r1.285.2.7 src/distrib/sets/lists/debug/mi
 cvs rdiff -u -r1.818.2.4 -r1.818.2.5 src/distrib/sets/lists/tests/mi
 cvs rdiff -u -r1.14 -r1.14.2.1 src/tests/crypto/libcrypto/Makefile
 cvs rdiff -u -r0 -r1.2.4.2 src/tests/crypto/libcrypto/t_sha512trunc.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.