From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jakub Jelen To: git-commits@fedoraproject.org Subject: [rpms/yubihsm-shell] epel10.2: Use low-level AES operations to prevent session leak (#2487009) Date: Tue, 07 Jul 2026 09:30:51 GMT Message-ID: <178341665151.1.1536643498826820584.rpms-yubihsm-shell-c5bcf9918450@fedoraproject.org> List-ID: X-Git-Repo: rpms/yubihsm-shell X-Git-Branch: epel10.2 X-Git-Rev: c5bcf991845084d774d391c717423ee7857acbcf QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMveXViaWhzbS1zaGVs bApCcmFuY2ggOiBlcGVsMTAuMgpDb21taXQgOiBjNWJjZjk5MTg0NTA4NGQ3NzRkMzkxYzcxNzQy M2VlNzg1N2FjYmNmCkF1dGhvciA6IEpha3ViIEplbGVuIDxqamVsZW5AcmVkaGF0LmNvbT4KRGF0 ZSAgIDogMjAyNi0wNi0yM1QxNToyNTo1NCswMjowMApTdGF0cyAgOiArMjMxLy0yIGluIDIgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3l1Ymloc20t c2hlbGwvYy9jNWJjZjk5MTg0NTA4NGQ3NzRkMzkxYzcxNzQyM2VlNzg1N2FjYmNmP2JyYW5jaD1l cGVsMTAuMgoKTG9nOgpVc2UgbG93LWxldmVsIEFFUyBvcGVyYXRpb25zIHRvIHByZXZlbnQgc2Vz c2lvbiBsZWFrICgjMjQ4NzAwOSkKCi0tLQpkaWZmIC0tZ2l0IGEveXViaWhzbS1zaGVsbC0yLjcu MC1zZXNzaW9uLWxlYWsucGF0Y2ggYi95dWJpaHNtLXNoZWxsLTIuNy4wLXNlc3Npb24tbGVhay5w YXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi43N2I4MzU1Ci0tLSAvZGV2 L251bGwKKysrIGIveXViaWhzbS1zaGVsbC0yLjcuMC1zZXNzaW9uLWxlYWsucGF0Y2gKQEAgLTAs MCArMSwyMjggQEAKK2RpZmYgLS1naXQgYS9hZXNfY21hYy9hZXMuYyBiL2Flc19jbWFjL2Flcy5j CitpbmRleCA1YjVmNDVmLi42OTZhMjg5IDEwMDY0NAorLS0tIGEvYWVzX2NtYWMvYWVzLmMKKysr KyBiL2Flc19jbWFjL2Flcy5jCitAQCAtMTcwLDc3ICsxNzAsMTUgQEAgY2xlYW51cDoKKyAKKyAj ZWxzZQorIAorLXN0YXRpYyBjb25zdCBFVlBfQ0lQSEVSICphZXNfZWNiKHVpbnQxNl90IGtleV9s ZW4pIHsKKy0gIHN3aXRjaCAoa2V5X2xlbikgeworLSAgICBjYXNlIDE2OgorLSAgICAgIHJldHVy biBFVlBfYWVzXzEyOF9lY2IoKTsKKy0gICAgY2FzZSAyNDoKKy0gICAgICByZXR1cm4gRVZQX2Fl c18xOTJfZWNiKCk7CistICAgIGNhc2UgMzI6CistICAgICAgcmV0dXJuIEVWUF9hZXNfMjU2X2Vj YigpOworLSAgICBkZWZhdWx0OgorLSAgICAgIHJldHVybiBOVUxMOworLSAgfQorLX0KKy0KKy1z dGF0aWMgY29uc3QgRVZQX0NJUEhFUiAqYWVzX2NiYyh1aW50MTZfdCBrZXlfbGVuKSB7CistICBz d2l0Y2ggKGtleV9sZW4pIHsKKy0gICAgY2FzZSAxNjoKKy0gICAgICByZXR1cm4gRVZQX2Flc18x MjhfY2JjKCk7CistICAgIGNhc2UgMjQ6CistICAgICAgcmV0dXJuIEVWUF9hZXNfMTkyX2NiYygp OworLSAgICBjYXNlIDMyOgorLSAgICAgIHJldHVybiBFVlBfYWVzXzI1Nl9jYmMoKTsKKy0gICAg ZGVmYXVsdDoKKy0gICAgICByZXR1cm4gTlVMTDsKKy0gIH0KKy19CistCistc3RhdGljIGludCBh ZXNfZW5jcnlwdF9leChjb25zdCBFVlBfQ0lQSEVSICpjaXBoZXIsIGNvbnN0IHVpbnQ4X3QgKmlu LAorLSAgICAgICAgICAgICAgICAgICAgICAgICAgdWludDhfdCAqb3V0LCB1aW50MTZfdCBsZW4s IGNvbnN0IHVpbnQ4X3QgKml2LAorLSAgICAgICAgICAgICAgICAgICAgICAgICAgYWVzX2NvbnRl eHQgKmN0eCkgeworLSAgaWYgKEVWUF9FbmNyeXB0SW5pdF9leChjdHgtPmN0eCwgY2lwaGVyLCBO VUxMLCBjdHgtPmtleSwgaXYpICE9IDEpIHsKKy0gICAgcmV0dXJuIC0xOworLSAgfQorLSAgaWYg KEVWUF9DSVBIRVJfQ1RYX3NldF9wYWRkaW5nKGN0eC0+Y3R4LCAwKSAhPSAxKSB7CistICAgIHJl dHVybiAtMjsKKy0gIH0KKy0gIGludCB1cGRhdGVfbGVuID0gbGVuOworLSAgaWYgKEVWUF9FbmNy eXB0VXBkYXRlKGN0eC0+Y3R4LCBvdXQsICZ1cGRhdGVfbGVuLCBpbiwgbGVuKSAhPSAxKSB7Cist ICAgIHJldHVybiAtMzsKKy0gIH0KKy0gIGludCBmaW5hbF9sZW4gPSBsZW4gLSB1cGRhdGVfbGVu OworLSAgaWYgKEVWUF9FbmNyeXB0RmluYWxfZXgoY3R4LT5jdHgsIG91dCArIHVwZGF0ZV9sZW4s ICZmaW5hbF9sZW4pICE9IDEpIHsKKy0gICAgcmV0dXJuIC00OworLSAgfQorLSAgaWYgKHVwZGF0 ZV9sZW4gKyBmaW5hbF9sZW4gIT0gbGVuKSB7CistICAgIHJldHVybiAtNTsKKy0gIH0KKy0gIHJl dHVybiAwOworLX0KKy0KKy1zdGF0aWMgaW50IGFlc19kZWNyeXB0X2V4KGNvbnN0IEVWUF9DSVBI RVIgKmNpcGhlciwgY29uc3QgdWludDhfdCAqaW4sCistICAgICAgICAgICAgICAgICAgICAgICAg ICB1aW50OF90ICpvdXQsIHVpbnQxNl90IGxlbiwgY29uc3QgdWludDhfdCAqaXYsCistICAgICAg ICAgICAgICAgICAgICAgICAgICBhZXNfY29udGV4dCAqY3R4KSB7CistICBpZiAoRVZQX0RlY3J5 cHRJbml0X2V4KGN0eC0+Y3R4LCBjaXBoZXIsIE5VTEwsIGN0eC0+a2V5LCBpdikgIT0gMSkgewor LSAgICByZXR1cm4gLTE7CistICB9CistICBpZiAoRVZQX0NJUEhFUl9DVFhfc2V0X3BhZGRpbmco Y3R4LT5jdHgsIDApICE9IDEpIHsKKy0gICAgcmV0dXJuIC0yOworLSAgfQorLSAgaW50IHVwZGF0 ZV9sZW4gPSBsZW47CistICBpZiAoRVZQX0RlY3J5cHRVcGRhdGUoY3R4LT5jdHgsIG91dCwgJnVw ZGF0ZV9sZW4sIGluLCBsZW4pICE9IDEpIHsKKy0gICAgcmV0dXJuIC0zOworLSAgfQorLSAgaW50 IGZpbmFsX2xlbiA9IGxlbiAtIHVwZGF0ZV9sZW47CistICBpZiAoRVZQX0RlY3J5cHRGaW5hbF9l eChjdHgtPmN0eCwgb3V0ICsgdXBkYXRlX2xlbiwgJmZpbmFsX2xlbikgIT0gMSkgeworLSAgICBy ZXR1cm4gLTQ7CistICB9CistICBpZiAodXBkYXRlX2xlbiArIGZpbmFsX2xlbiAhPSBsZW4pIHsK Ky0gICAgcmV0dXJuIC01OworLSAgfQorLSAgcmV0dXJuIDA7CistfQorKy8qCisrICogVXNlIHRo ZSBsb3ctbGV2ZWwgQUVTIEFQSSAoQUVTX3NldF9lbmNyeXB0X2tleSAvIEFFU19lY2JfZW5jcnlw dCAvCisrICogQUVTX2NiY19lbmNyeXB0KSBpbnN0ZWFkIG9mIHRoZSBFVlAgQVBJLiAgVGhlIGxv dy1sZXZlbCBmdW5jdGlvbnMKKysgKiBvcGVyYXRlIGRpcmVjdGx5IG9uIGFuIEFFU19LRVkgc3Ry dWN0IHdpdGggcHJlLWNvbXB1dGVkIHJvdW5kIGtleXMKKysgKiBhbmQgZG8gbm90IGRlcGVuZCBv biBPcGVuU1NMJ3MgZ2xvYmFsIGxpYnJhcnkgY29udGV4dC4gIFRoaXMgbWVhbnMKKysgKiB0aGV5 IGNvbnRpbnVlIHRvIHdvcmsgYWZ0ZXIgT1BFTlNTTF9jbGVhbnVwKCkgaGFzIGJlZW4gY2FsbGVk LAorKyAqIHdoaWNoIGlzIGNyaXRpY2FsIGZvciBTQ1AwMyBzZXNzaW9uIGNsb3NlIGR1cmluZyBh cHBsaWNhdGlvbgorKyAqIHRlYXJkb3duLgorKyAqLworIAorICNlbmRpZgorIAorQEAgLTI2Niwx NyArMjA0LDE1IEBAIGludCBhZXNfc2V0X2tleShjb25zdCB1aW50OF90ICprZXksIHVpbnQxNl90 IGtleV9sZW4sIGFlc19jb250ZXh0ICpjdHgpIHsKKyAKKyAjZWxzZQorIAorLSAgaWYgKGtleSA9 PSBOVUxMIHx8IGFlc19lY2Ioa2V5X2xlbikgPT0gTlVMTCkgeworKyAgaWYgKGtleSA9PSBOVUxM IHx8IChrZXlfbGVuICE9IDE2ICYmIGtleV9sZW4gIT0gMjQgJiYga2V5X2xlbiAhPSAzMikpIHsK KyAgICAgcmV0dXJuIC0xOworICAgfQorLSAgaWYgKCFjdHgtPmN0eCkgeworLSAgICBjdHgtPmN0 eCA9IEVWUF9DSVBIRVJfQ1RYX25ldygpOworLSAgICBpZiAoIWN0eC0+Y3R4KSB7CistICAgICAg cmV0dXJuIC0yOworLSAgICB9CisrICBpZiAoQUVTX3NldF9lbmNyeXB0X2tleShrZXksIGtleV9s ZW4gKiA4LCAmY3R4LT5lbmNfa2V5KSAhPSAwKSB7CisrICAgIHJldHVybiAtMjsKKysgIH0KKysg IGlmIChBRVNfc2V0X2RlY3J5cHRfa2V5KGtleSwga2V5X2xlbiAqIDgsICZjdHgtPmRlY19rZXkp ICE9IDApIHsKKysgICAgcmV0dXJuIC0zOworICAgfQorLSAgY3R4LT5rZXlfbGVuID0ga2V5X2xl bjsKKy0gIG1lbWNweShjdHgtPmtleSwga2V5LCBrZXlfbGVuKTsKKyAKKyAjZW5kaWYKKyAKK0BA IC0yOTUsMjMgKzIzMSwxOCBAQCBpbnQgYWVzX2xvYWRfa2V5KGNvbnN0IGNoYXIgKmtleSwgYWVz X2NvbnRleHQgKmN0eCkgeworICAgY29uc3QgdWludDhfdCBkZWZhdWx0X21hY1tdID0gezB4NTks IDB4MmYsIDB4ZDQsIDB4ODMsIDB4ZjcsIDB4NTksCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgMHhlMiwgMHg5OSwgMHgwOSwgMHhhMCwgMHg0YywgMHg0NSwKKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAweDA1LCAweGQyLCAweGNlLCAweDBhfTsKKy0gIGN0eC0+ a2V5X2xlbiA9IHNpemVvZihkZWZhdWx0X2VuYyk7CistICBpZiAoa2V5ID09IE5VTEwgfHwgYWVz X2VjYihjdHgtPmtleV9sZW4pID09IE5VTEwpIHsKKysgIGNvbnN0IHVpbnQ4X3QgKms7CisrCisr ICBpZiAoa2V5ID09IE5VTEwpCisgICAgIHJldHVybiAtMTsKKy0gIH0KKy0gIGlmICghY3R4LT5j dHgpIHsKKy0gICAgY3R4LT5jdHggPSBFVlBfQ0lQSEVSX0NUWF9uZXcoKTsKKy0gICAgaWYgKCFj dHgtPmN0eCkgeworLSAgICAgIHJldHVybiAtMjsKKy0gICAgfQorLSAgfQorICAgaWYgKCFzdHJj bXAoa2V5LCAiZGVmYXVsdF9lbmMiKSkKKy0gICAgbWVtY3B5KGN0eC0+a2V5LCBkZWZhdWx0X2Vu YywgY3R4LT5rZXlfbGVuKTsKKysgICAgayA9IGRlZmF1bHRfZW5jOworICAgZWxzZSBpZiAoIXN0 cmNtcChrZXksICJkZWZhdWx0X21hYyIpKQorLSAgICBtZW1jcHkoY3R4LT5rZXksIGRlZmF1bHRf bWFjLCBjdHgtPmtleV9sZW4pOworKyAgICBrID0gZGVmYXVsdF9tYWM7CisgICBlbHNlCistICAg IG1lbXNldChjdHgtPmtleSwgMCwgY3R4LT5rZXlfbGVuKTsKKy0gIHJldHVybiAwOworKyAgICBy ZXR1cm4gLTE7CisrCisrICByZXR1cm4gYWVzX3NldF9rZXkoaywgc2l6ZW9mKGRlZmF1bHRfZW5j KSwgY3R4KTsKKyAjZW5kaWYKKyB9CisgCitAQCAtMzM0LDggKzI2NSw4IEBAIGludCBhZXNfZW5j cnlwdChjb25zdCB1aW50OF90ICppbiwgdWludDhfdCAqb3V0LCBhZXNfY29udGV4dCAqY3R4KSB7 CisgCisgI2Vsc2UKKyAKKy0gIHJldHVybiBhZXNfZW5jcnlwdF9leChhZXNfZWNiKGN0eC0+a2V5 X2xlbiksIGluLCBvdXQsIEFFU19CTE9DS19TSVpFLCBOVUxMLAorLSAgICAgICAgICAgICAgICAg ICAgICAgIGN0eCk7CisrICBBRVNfZWNiX2VuY3J5cHQoaW4sIG91dCwgJmN0eC0+ZW5jX2tleSwg QUVTX0VOQ1JZUFQpOworKyAgcmV0dXJuIDA7CisgCisgI2VuZGlmCisgfQorQEAgLTM1OSw4ICsy OTAsOCBAQCBpbnQgYWVzX2RlY3J5cHQoY29uc3QgdWludDhfdCAqaW4sIHVpbnQ4X3QgKm91dCwg YWVzX2NvbnRleHQgKmN0eCkgeworIAorICNlbHNlCisgCistICByZXR1cm4gYWVzX2RlY3J5cHRf ZXgoYWVzX2VjYihjdHgtPmtleV9sZW4pLCBpbiwgb3V0LCBBRVNfQkxPQ0tfU0laRSwgTlVMTCwK Ky0gICAgICAgICAgICAgICAgICAgICAgICBjdHgpOworKyAgQUVTX2VjYl9lbmNyeXB0KGluLCBv dXQsICZjdHgtPmRlY19rZXksIEFFU19ERUNSWVBUKTsKKysgIHJldHVybiAwOworIAorICNlbmRp ZgorIH0KK0BAIC0zODgsNyArMzE5LDEwIEBAIGludCBhZXNfY2JjX2VuY3J5cHQoY29uc3QgdWlu dDhfdCAqaW4sIHVpbnQ4X3QgKm91dCwgdWludDE2X3QgbGVuLAorIAorICNlbHNlCisgCistICBy ZXR1cm4gYWVzX2VuY3J5cHRfZXgoYWVzX2NiYyhjdHgtPmtleV9sZW4pLCBpbiwgb3V0LCBsZW4s IGl2LCBjdHgpOworKyAgdWludDhfdCBfaXZbQUVTX0JMT0NLX1NJWkVdOworKyAgbWVtY3B5KF9p diwgaXYsIEFFU19CTE9DS19TSVpFKTsKKysgIEFFU19jYmNfZW5jcnlwdChpbiwgb3V0LCBsZW4s ICZjdHgtPmVuY19rZXksIF9pdiwgQUVTX0VOQ1JZUFQpOworKyAgcmV0dXJuIDA7CisgCisgI2Vu ZGlmCisgfQorQEAgLTQxNiw3ICszNTAsMTAgQEAgaW50IGFlc19jYmNfZGVjcnlwdChjb25zdCB1 aW50OF90ICppbiwgdWludDhfdCAqb3V0LCB1aW50MTZfdCBsZW4sCisgCisgI2Vsc2UKKyAKKy0g IHJldHVybiBhZXNfZGVjcnlwdF9leChhZXNfY2JjKGN0eC0+a2V5X2xlbiksIGluLCBvdXQsIGxl biwgaXYsIGN0eCk7CisrICB1aW50OF90IF9pdltBRVNfQkxPQ0tfU0laRV07CisrICBtZW1jcHko X2l2LCBpdiwgQUVTX0JMT0NLX1NJWkUpOworKyAgQUVTX2NiY19lbmNyeXB0KGluLCBvdXQsIGxl biwgJmN0eC0+ZGVjX2tleSwgX2l2LCBBRVNfREVDUllQVCk7CisrICByZXR1cm4gMDsKKyAKKyAj ZW5kaWYKKyB9CitAQCAtNDg0LDcgKzQyMSw3IEBAIHZvaWQgYWVzX2Rlc3Ryb3koYWVzX2NvbnRl eHQgKmN0eCkgeworIAorICNlbHNlCisgCistICBFVlBfQ0lQSEVSX0NUWF9mcmVlKGN0eC0+Y3R4 KTsKKysgIC8qIEFFU19LRVkgaGFzIG5vIHJlc291cmNlcyB0byBmcmVlLCBqdXN0IHplcm8gdGhl IGtleSBtYXRlcmlhbCAqLworIAorICNlbmRpZgorIAorZGlmZiAtLWdpdCBhL2Flc19jbWFjL2Fl cy5oIGIvYWVzX2NtYWMvYWVzLmgKK2luZGV4IDc5OGNiMTUuLmJhMGVmOTcgMTAwNjQ0CistLS0g YS9hZXNfY21hYy9hZXMuaAorKysrIGIvYWVzX2NtYWMvYWVzLmgKK0BAIC0zMCw3ICszMCw3IEBA CisgI2luY2x1ZGUgPGJjcnlwdC5oPgorICNpbmNsdWRlIDxudHN0YXR1cy5oPgorICNlbHNlCist I2luY2x1ZGUgPG9wZW5zc2wvZXZwLmg+CisrI2luY2x1ZGUgPG9wZW5zc2wvYWVzLmg+CisgI2Vu ZGlmCisgCisgI2lmbmRlZiBBRVNfQkxPQ0tfU0laRSAvLyBEZWZpbmVkIGluIG9wZW5zc2wvYWVz LmgKK0BAIC01MSw5ICs1MSw4IEBAIHR5cGVkZWYgc3RydWN0IHsKKyAgIFBCWVRFIHBiS2V5RUNC T2JqOworICAgc2l6ZV90IGNiS2V5T2JqOworICNlbHNlCistICBFVlBfQ0lQSEVSX0NUWCAqY3R4 OworLSAgdWludDE2X3Qga2V5X2xlbjsKKy0gIHVpbnQ4X3Qga2V5WzMyXTsKKysgIEFFU19LRVkg ZW5jX2tleTsKKysgIEFFU19LRVkgZGVjX2tleTsKKyAjZW5kaWYKKyB9IGFlc19jb250ZXh0Owor IAorCgpkaWZmIC0tZ2l0IGEveXViaWhzbS1zaGVsbC5zcGVjIGIveXViaWhzbS1zaGVsbC5zcGVj CmluZGV4IDliZjIzNjIuLmY4OGM2ODEgMTAwNjQ0Ci0tLSBhL3l1Ymloc20tc2hlbGwuc3BlYwor KysgYi95dWJpaHNtLXNoZWxsLnNwZWMKQEAgLTEzLDYgKzEzLDggQEAgU291cmNlMToJaHR0cHM6 Ly9kZXZlbG9wZXJzLnl1Ymljby5jb20vJXtuYW1lfS9SZWxlYXNlcy8le25hbWV9LSV7dmVyc2lv bn0udGFyLmcKIFNvdXJjZTI6CWdwZ2tleS05NTg4RUEwRi5ncGcKICMgaHR0cHM6Ly9naXRodWIu Y29tL1l1Ymljby95dWJpaHNtLXNoZWxsL3B1bGwvNDExCiBQYXRjaDI6CXl1Ymloc20tc2hlbGwt Mi41LjAtcGNzYy1saXRlLnBhdGNoCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9ZdWJpY28veXViaWhz bS1zaGVsbC9wdWxsLzUyOAorUGF0Y2gzOgl5dWJpaHNtLXNoZWxsLTIuNy4wLXNlc3Npb24tbGVh ay5wYXRjaAogCiBCdWlsZFJlcXVpcmVzOgljbWFrZQogQnVpbGRSZXF1aXJlczoJY3BwY2hlY2sK QEAgLTQ1LDggKzQ3LDcgQEAgRGV2ZWxvcG1lbnQgbGlicmFyaWVzIGZvciB3b3JraW5nIHdpdGgg eXViaWhzbSAyLgogCiAlcHJlcAogZ3BndjIgLS1xdWlldCAtLWtleXJpbmcgJXtTT1VSQ0UyfSAl e1NPVVJDRTF9ICV7U09VUkNFMH0KLSVzZXR1cCAtcQotJXBhdGNoIDIgLXAxCislYXV0b3NldHVw IC1wMQogCiAKICVidWlsZAo=