public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/nss] f44: Address review feedback for DRBG fork handling
@ 2026-07-29 17:38 Rostislav Krasny
0 siblings, 0 replies; only message in thread
From: Rostislav Krasny @ 2026-07-29 17:38 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/nss
Branch : f44
Commit : f5cbee7a8834f96eb858b44920f4455f73580f27
Author : Rostislav Krasny <rostiprodev@gmail.com>
Date : 2026-07-29T16:43:25+03:00
Stats : +12/-1 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/nss/c/f5cbee7a8834f96eb858b44920f4455f73580f27?branch=f44
Log:
Address review feedback for DRBG fork handling
---
diff --git a/nss-3.125-drbg-reseed-after-fork.patch b/nss-3.125-drbg-reseed-after-fork.patch
index ef3d034..9f73f89 100644
--- a/nss-3.125-drbg-reseed-after-fork.patch
+++ b/nss-3.125-drbg-reseed-after-fork.patch
@@ -78,10 +78,21 @@
+ * inherited state is rebuilt. prng_GenerateGlobalRandomBytes() makes the
+ * same check; without it the PR_Lock() below dereferences NULL. */
+ if (globalrng == NULL) {
-+ PORT_SetError(SEC_ERROR_INVALID_ARGS);
++ PORT_SetError(SEC_ERROR_LIBRARY_FAILURE);
+ return SECFailure;
+ }
+
PR_Lock(globalrng->lock);
/* if we're passed more than our additionalDataCache, simply
* call reseed with that data */
+@@ -736,10 +793,9 @@
+ void
+ RNG_RNGShutdown(void)
+ {
+ /* check for a valid global RNG context */
+- PORT_Assert(globalrng != NULL);
+ if (globalrng == NULL) {
+ /* Should set a "not initialized" error code. */
+ PORT_SetError(SEC_ERROR_NO_MEMORY);
+ return;
+ }
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-29 17:38 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-29 17:38 [rpms/nss] f44: Address review feedback for DRBG fork handling Rostislav Krasny
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox