From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Rostislav Krasny To: git-commits@fedoraproject.org Subject: [rpms/nss] f44: Reseed the freebl DRBG after fork() Date: Wed, 29 Jul 2026 17:38:25 GMT Message-ID: <178534670590.1.6493704659492667690.rpms-nss-6cd71667a287@fedoraproject.org> List-ID: X-Git-Repo: rpms/nss X-Git-Branch: f44 X-Git-Rev: 6cd71667a2874a228c43f526378cbb82cc9831aa ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbnNzCiAgICAgICAgICAgIEJyYW5jaCA6IGY0NAogICAgICAgICAgICBDb21t aXQgOiA2Y2Q3MTY2N2EyODc0YTIyOGM0M2Y1MjYzNzhjYmI4MmNjOTgzMWFhCiAgICAgICAgICAg IEF1dGhvciA6IFJvc3Rpc2xhdiBLcmFzbnkgPHJvc3RpcHJvZGV2QGdtYWlsLmNvbT4KICAgICAg ICAgICAgRGF0ZSAgIDogMjAyNi0wNy0yNVQwMTo1Nzo1OSswMzowMAogICAgICAgICAgICBTdGF0 cyAgOiArOTYvLTEgaW4gMiBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8vc3Jj LmZlZG9yYXByb2plY3Qub3JnL3JwbXMvbnNzL2MvNmNkNzE2NjdhMjg3NGEyMjhjNDNmNTI2Mzc4 Y2JiODJjYzk4MzFhYT9icmFuY2g9ZjQ0CgogICAgICAgICAgICBMb2c6CiAgICAgICAgICAgIFJl c2VlZCB0aGUgZnJlZWJsIERSQkcgYWZ0ZXIgZm9yaygpCgpmb3JrKCkgZ2l2ZXMgdGhlIGNoaWxk IGEgdmVyYmF0aW0gY29weSBvZiB0aGVHbG9iYWxSbmcgdG9nZXRoZXIgd2l0aCB0aGUKUFJfQ2Fs bE9uY2UgZmxhZ3MgdGhhdCBtYXJrIGl0IGluc3RhbnRpYXRlZCwgc28gUk5HX1JOR0luaXQoKSBp biB0aGUgY2hpbGQKaXMgYSBuby1vcCBhbmQgdGhlIGNoaWxkIHJlcGxheXMgdGhlIHBhcmVudCdz IG91dHB1dCBzdHJlYW0uIFJlZ2lzdGVyIGEKcHRocmVhZF9hdGZvcmsgY2hpbGQgaGFuZGxlciB0 aGF0IGRpc2NhcmRzIHRoZSBpbmhlcml0ZWQgc3RhdGUsIGZvcmNpbmcgYQpjbGVhbiByZWluc3Rh bnRpYXRlIGZyb20gc3lzdGVtIGVudHJvcHkgYXQgdGhlIG5leHQgUk5HIHVzZS4KCkFsc28gYWRk IHRoZSBOVUxMIGNoZWNrIFJOR19SYW5kb21VcGRhdGUoKSB3YXMgbWlzc2luZy4gSXRzIHNpYmxp bmcKcHJuZ19HZW5lcmF0ZUdsb2JhbFJhbmRvbUJ5dGVzKCkgYWxyZWFkeSBoYXMgb25lLCBhbmQg d2l0aG91dCBpdCB0aGUKUFJfTG9jaygpIGJlbG93IGRlcmVmZXJlbmNlcyBOVUxMLgoKUmVwb3J0 ZWQgYWdhaW5zdCBGaXJlZm94J3MgTGludXggZm9yayBzZXJ2ZXIsIHdoZXJlIGNvbnRlbnQgcHJv Y2Vzc2VzCmZvcmtlZCBmcm9tIGEgY29tbW9uIGFuY2VzdG9yIGdlbmVyYXRlZCBpZGVudGljYWwg VVVJRHMgKG1vemJ6IzIwNTY1MDkpLApidXQgdGhlIGRlZmVjdCBhZmZlY3RzIGFueSBOU1MgY29u c3VtZXIgdGhhdCBmb3JrcyB3aXRob3V0IGV4ZWMuCgpDby1BdXRob3JlZC1CeTogQ2xhdWRlIE9w dXMgNSA8bm9yZXBseUBhbnRocm9waWMuY29tPgoKLS0tCmRpZmYgLS1naXQgYS9uc3MtMy4xMjUt ZHJiZy1yZXNlZWQtYWZ0ZXItZm9yay5wYXRjaCBiL25zcy0zLjEyNS1kcmJnLXJlc2VlZC1hZnRl ci1mb3JrLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmVmM2QwMzQK LS0tIC9kZXYvbnVsbAorKysgYi9uc3MtMy4xMjUtZHJiZy1yZXNlZWQtYWZ0ZXItZm9yay5wYXRj aApAQCAtMCwwICsxLDg3IEBACistLS0gYS9saWIvZnJlZWJsL2RyYmcuYwkyMDI2LTA3LTI1IDAw OjA5OjQwLjQ1Mjk0MjYxNSArMDMwMAorKysrIGIvbGliL2ZyZWVibC9kcmJnLmMJMjAyNi0wNy0y NSAwMToxMToyOS4xNjMwNDE4NDIgKzAzMDAKK0BAIC0yMCw2ICsyMCwxMCBAQAorICNpbmNsdWRl ICJzZWNybmcuaCIgLyogZm9yIFJOR19TeXN0ZW1STkcoKSAqLworICNpbmNsdWRlICJzZWNtcGku aCIKKyAKKysjaWZkZWYgWFBfVU5JWAorKyNpbmNsdWRlIDxwdGhyZWFkLmg+CisrI2VuZGlmCisr CisgLyogUFJOR19TRUVETEVOIGRlZmluZWQgaW4gTklTVCBTUCA4MDAtOTAgc2VjdGlvbiAxMC4x CisgICogZm9yIFNIQS0xLCBTSEEtMjI0LCBhbmQgU0hBLTI1NiBpdCdzIDQ0MCBiaXRzLgorICAq IGZvciBTSEEtMzg0IGFuZCBTSEEtNTEyIGl0J3MgODg4IGJpdHMgKi8KK0BAIC00NzEsNiArNDc1 LDQ1IEBACisgICovCisgc3RhdGljIGNvbnN0IFBSQ2FsbE9uY2VUeXBlIHByaXN0aW5lQ2FsbE9u Y2U7Cisgc3RhdGljIFBSQ2FsbE9uY2VUeXBlIGNvUk5HSW5pdDsKKysKKysjaWZkZWYgWFBfVU5J WAorK3N0YXRpYyBQUkNhbGxPbmNlVHlwZSBjb1JOR0luaXRBdEZvcms7CisrCisrLyogZm9yaygp IGdpdmVzIHRoZSBjaGlsZCBhIHZlcmJhdGltIGNvcHkgb2YgdGhlIERSQkcgc3RhdGUsIGluY2x1 ZGluZyB0aGUKKysgKiBQUl9DYWxsT25jZSBmbGFncyBtYXJraW5nIGl0IGluc3RhbnRpYXRlZCwg c28gd2l0aG91dCB0aGlzIHRoZSBjaGlsZAorKyAqIHJlcGxheXMgdGhlIHBhcmVudCdzIG91dHB1 dCBzdHJlYW0uCisrICoKKysgKiBLZWVwIGFzeW5jLXNpZ25hbC1zYWZlIC0tIG5vIGFsbG9jYXRp b24sIGxvY2tzIG9yIEkvTyAtLSBmb3IgY2FsbGVycyB0aGF0CisrICogZm9yayBmcm9tIGEgbXVs dGl0aHJlYWRlZCBwcm9jZXNzOyB0aGUgcmVpbnN0YW50aWF0ZSBpcyBkZWZlcnJlZCB0byB0aGUK KysgKiBuZXh0IFJORyB1c2UuICBPbmx5IGZvcmsgbWVjaGFuaXNtcyB0aGF0IHJ1biBhdGZvcmsg aGFuZGxlcnMgYXJlIGNvdmVyZWQuCisrICogTmV2ZXIgcnVuIHRoaXMgYWZ0ZXIgdmZvcmsoMik6 IHRoYXQgY2hpbGQgc2hhcmVzIHRoZSBwYXJlbnQncyBhZGRyZXNzCisrICogc3BhY2UsIHNvIHRo ZSB6ZXJvaW5nIGJlbG93IHdvdWxkIGRlc3Ryb3kgdGhlIGxpdmUgY29udGV4dC4gKi8KKytzdGF0 aWMgdm9pZAorK3JuZ19hdGZvcmtfY2hpbGQodm9pZCkKKyt7CisrICAgIC8qIFplcm8gdGhlIHN0 b3JhZ2UsIG5vdCAqZ2xvYmFscm5nOiBhZnRlciBSTkdfUk5HU2h1dGRvd24oKSB0aGUgcG9pbnRl cgorKyAgICAgKiBpcyBOVUxMIHdoaWxlIHRoZSBjb250ZXh0IHN0aWxsIGhvbGRzIEMgYW5kIFYg dGhhdCBwcm5nX2ZyZWVSTkdDb250ZXh0CisrICAgICAqIGRlbGliZXJhdGVseSBwcmVzZXJ2ZWQu ICBEaXNjYXJkaW5nIHRoZW0gZm9yY2VzIGEgY2xlYW4gcmVpbnN0YW50aWF0ZQorKyAgICAgKiBy YXRoZXIgdGhhbiBhIHJlc2VlZCBvdmVyIGluaGVyaXRlZCBzdGF0ZSwgYW5kIGNsZWFycyB0aGUg c3RhbGUgbG9jaworKyAgICAgKiBwb2ludGVyIHNvIHJuZ19pbml0KCkgYnVpbGRzIGEgZnJlc2gg b25lLiAgVGhlIGluaGVyaXRlZCBQUkxvY2sgaXMKKysgICAgICogbGVha2VkIG9uIHB1cnBvc2U6 IGEgdGhyZWFkIHRoYXQgZGlkIG5vdCBzdXJ2aXZlIHRoZSBmb3JrIG1heSBoYXZlIGhlbGQKKysg ICAgICogaXQsIHNvIGRlc3Ryb3lpbmcgaXQgd291bGQgYmUgdW5kZWZpbmVkLiAqLworKyAgICBQ T1JUX1NhZmVaZXJvKCZ0aGVHbG9iYWxSbmcsIHNpemVvZih0aGVHbG9iYWxSbmcpKTsKKysgICAg Z2xvYmFscm5nID0gTlVMTDsKKysgICAgLyogUmVzZXQgYm90aDogdGhlIGZpcnN0IG90aGVyd2lz ZSBzdXBwcmVzc2VzIHJuZ19pbml0KCkgZW50aXJlbHksIHRoZQorKyAgICAgKiBzZWNvbmQgbGVh dmVzIHByZXZpb3VzRW50cm9weUhhc2ggemVyb2VkIHdoaWxlIGNsYWltaW5nIGl0IHdhcyBwcmlt ZWQuICovCisrICAgIGNvUk5HSW5pdCA9IHByaXN0aW5lQ2FsbE9uY2U7CisrICAgIGNvUk5HSW5p dEVudHJvcHkgPSBwcmlzdGluZUNhbGxPbmNlOworK30KKysKKytzdGF0aWMgUFJTdGF0dXMKKyty bmdfcmVnaXN0ZXJBdEZvcmsodm9pZCkKKyt7CisrICAgIHB0aHJlYWRfYXRmb3JrKE5VTEwsIE5V TEwsIHJuZ19hdGZvcmtfY2hpbGQpOworKyAgICByZXR1cm4gUFJfU1VDQ0VTUzsKKyt9CisrI2Vu ZGlmCisrCisgc3RhdGljIFBSU3RhdHVzCisgcm5nX2luaXQodm9pZCkKKyB7CitAQCAtNDc4LDYg KzUyMSwxMiBAQAorICAgICBTRUNTdGF0dXMgcnYgPSBTRUNTdWNjZXNzOworIAorICAgICBpZiAo Z2xvYmFscm5nID09IE5VTEwpIHsKKysjaWZkZWYgWFBfVU5JWAorKyAgICAgICAgLyogT25jZSBw ZXIgcHJvY2VzczogdGhlIHJlZ2lzdHJhdGlvbiBzdXJ2aXZlcyBmb3JrKCkgYW5kCisrICAgICAg ICAgKiBjb1JOR0luaXRBdEZvcmsgaXMgbmV2ZXIgcmVzZXQsIHNvIHJlcGVhdGVkIGZvcmtzIGNh bm5vdCBzdGFjaworKyAgICAgICAgICogZHVwbGljYXRlIGhhbmRsZXJzLiAqLworKyAgICAgICAg UFJfQ2FsbE9uY2UoJmNvUk5HSW5pdEF0Rm9yaywgcm5nX3JlZ2lzdGVyQXRGb3JrKTsKKysjZW5k aWYKKyAgICAgICAgIC8qIGJ5dGVzIG5lZWRzIHRvIGhhdmUgZW5vdWdoIHNwYWNlIHRvIGhvbGQK KyAgICAgICAgICAqIGEgU0hBMjU2IGhhc2ggdmFsdWUuIEJsb3cgdXAgYXQgY29tcGlsZSB0aW1l IGlmIHRoaXMgaXNuJ3QgdHJ1ZSAqLworICAgICAgICAgUFJfU1RBVElDX0FTU0VSVChzaXplb2Yo Ynl0ZXMpID49IFNIQTI1Nl9MRU5HVEgpOworQEAgLTYxNyw2ICs2NjYsMTQgQEAKKyAgICAgUFJf U1RBVElDX0FTU0VSVChzaXplb2Yoc2l6ZV90KSA8PSA0KTsKKyAjZW5kaWYKKyAKKysgICAgLyog QWJzZW50IGJlZm9yZSB0aGUgZmlyc3QgUk5HX1JOR0luaXQoKSwgYW5kIGluIGEgY2hpbGQgdW50 aWwgdGhlCisrICAgICAqIGluaGVyaXRlZCBzdGF0ZSBpcyByZWJ1aWx0LiAgcHJuZ19HZW5lcmF0 ZUdsb2JhbFJhbmRvbUJ5dGVzKCkgbWFrZXMgdGhlCisrICAgICAqIHNhbWUgY2hlY2s7IHdpdGhv dXQgaXQgdGhlIFBSX0xvY2soKSBiZWxvdyBkZXJlZmVyZW5jZXMgTlVMTC4gKi8KKysgICAgaWYg KGdsb2JhbHJuZyA9PSBOVUxMKSB7CisrICAgICAgICBQT1JUX1NldEVycm9yKFNFQ19FUlJPUl9J TlZBTElEX0FSR1MpOworKyAgICAgICAgcmV0dXJuIFNFQ0ZhaWx1cmU7CisrICAgIH0KKysKKyAg ICAgUFJfTG9jayhnbG9iYWxybmctPmxvY2spOworICAgICAvKiBpZiB3ZSdyZSBwYXNzZWQgbW9y ZSB0aGFuIG91ciBhZGRpdGlvbmFsRGF0YUNhY2hlLCBzaW1wbHkKKyAgICAgICogY2FsbCByZXNl ZWQgd2l0aCB0aGF0IGRhdGEgKi8KCmRpZmYgLS1naXQgYS9uc3Muc3BlYyBiL25zcy5zcGVjCmlu ZGV4IDIzNTc5MDMuLmM5NzgwNGYgMTAwNjQ0Ci0tLSBhL25zcy5zcGVjCisrKyBiL25zcy5zcGVj CkBAIC0zLDcgKzMsNyBAQAogIyBOT1RFOiBUbyBhdm9pZCBOVlIgY2xhc2hlcyBvZiBuc3ByKiBw YWNrYWdlczoKICMgLSByZXNldCAlJXtuc3ByX3JlbGVhc2V9IHRvIDEsIHdoZW4gdXBkYXRpbmcg JSV7bnNwcl92ZXJzaW9ufQogIyAtIGluY3JlbWVudCAlJXtuc3ByX3ZlcnNpb259LCB3aGVuIHVw ZGF0aW5nIHRoZSBOU1MgcGFydCBvbmx5Ci0lZ2xvYmFsIGJhc2VyZWxlYXNlIDEKKyVnbG9iYWwg YmFzZXJlbGVhc2UgMgogJWdsb2JhbCBuc3NfcmVsZWFzZSAlYmFzZXJlbGVhc2UKICMgdXNlICIl JWdsb2JhbCBuc3ByX3JlbGVhc2UgJSVbJSViYXNlcmVsZWFzZStuXSIgdG8gaGFuZGxlIG9mZnNl dHMgd2hlbgogIyByZWxlYXNlIG51bWJlciBiZXR3ZWVuIG5zcyBhbmQgbnNwciBhcmUgZGlmZmVy ZW50LgpAQCAtMTQ1LDYgKzE0NSwxMCBAQCBQYXRjaDY2OiAgICAgICAgICBuc3MtMy4xMTgtbWwt ZHNhLXRscy10ZXN0LnBhdGNoCiBQYXRjaDY3OiAgICAgICAgICBuc3MtMy4xMTgtbWwtZHNhLXVu aXR0ZXN0cy5wYXRjaAogUGF0Y2g2ODogICAgICAgICAgbnNzLTMuMTIzLWZpeC1tbGRzYS1pbXBv cnQtcmVnZW5lcmF0aW9uLnBhdGNoCiAKKyMgUmVzZWVkIHRoZSBmcmVlYmwgRFJCRyBpbiB0aGUg Y2hpbGQgYWZ0ZXIgZm9yaygpLCBzbyBmb3JrZWQgY2hpbGRyZW4gZG8gbm90CisjIHJlcGxheSB0 aGUgcGFyZW50J3MgcmFuZG9tIHN0cmVhbSAobW96YnojMjA1NjUwOSkKK1BhdGNoNzA6ICAgICAg ICAgIG5zcy0zLjEyNS1kcmJnLXJlc2VlZC1hZnRlci1mb3JrLnBhdGNoCisKIFBhdGNoMTAwOiAg ICAgICAgIG5zcHItY29uZmlnLXBjLnBhdGNoCiBQYXRjaDEwMTogICAgICAgICBuc3ByLWdjYy1h dG9taWNzLnBhdGNoCiAKQEAgLTEwOTMsNiArMTA5NywxMCBAQCBmaQogCiAKICVjaGFuZ2Vsb2cK KyogU2F0IEp1bCAyNSAyMDI2IFJvc3Rpc2xhdiBLcmFzbnkgPHJvc3RpcHJvZGV2QGdtYWlsLmNv bT4gLSAzLjEyNS4wLTIKKy0gUmVzZWVkIHRoZSBmcmVlYmwgRFJCRyBhZnRlciBmb3JrKCkgc28g Zm9ya2VkIGNoaWxkcmVuIGRvIG5vdCByZXBsYXkgdGhlCisgIHBhcmVudCdzIHJhbmRvbSBzdHJl YW0gKEZpcmVmb3ggZm9yayBzZXJ2ZXIgZHVwbGljYXRlIFVVSURzIC8gY3J5cHRvIG91dHB1dCkK KwogKiBUaHUgSnVuIDE4IDIwMjYgRnJhbnRpc2VrIEtyZW56ZWxvayA8ZmtyZW56ZWxAcmVkaGF0 LmNvbT4gLSAzLjEyNS4wLTEKIC0gVXBkYXRlIE5TUyB0byAzLjEyNS4wCiAtIEZpeCBOU1BSIHZl cnNpb25pbmcgc2NoZW1lCg==