public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/nss] f44: Address review feedback for DRBG fork handling
@ 2026-07-29 17:38 Rostislav Krasny
  0 siblings, 0 replies; only message in thread
From: Rostislav Krasny @ 2026-07-29 17:38 UTC (permalink / raw)
  To: git-commits

A new commit has been pushed.

Repo   : rpms/nss
Branch : f44
Commit : f5cbee7a8834f96eb858b44920f4455f73580f27
Author : Rostislav Krasny <rostiprodev@gmail.com>
Date   : 2026-07-29T16:43:25+03:00
Stats  : +12/-1 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/nss/c/f5cbee7a8834f96eb858b44920f4455f73580f27?branch=f44

Log:
Address review feedback for DRBG fork handling

---
diff --git a/nss-3.125-drbg-reseed-after-fork.patch b/nss-3.125-drbg-reseed-after-fork.patch
index ef3d034..9f73f89 100644
--- a/nss-3.125-drbg-reseed-after-fork.patch
+++ b/nss-3.125-drbg-reseed-after-fork.patch
@@ -78,10 +78,21 @@
 +     * inherited state is rebuilt.  prng_GenerateGlobalRandomBytes() makes the
 +     * same check; without it the PR_Lock() below dereferences NULL. */
 +    if (globalrng == NULL) {
-+        PORT_SetError(SEC_ERROR_INVALID_ARGS);
++        PORT_SetError(SEC_ERROR_LIBRARY_FAILURE);
 +        return SECFailure;
 +    }
 +
      PR_Lock(globalrng->lock);
      /* if we're passed more than our additionalDataCache, simply
       * call reseed with that data */
+@@ -736,10 +793,9 @@
+ void
+ RNG_RNGShutdown(void)
+ {
+     /* check for a valid global RNG context */
+-    PORT_Assert(globalrng != NULL);
+     if (globalrng == NULL) {
+         /* Should set a "not initialized" error code. */
+         PORT_SetError(SEC_ERROR_NO_MEMORY);
+         return;
+     }

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-07-29 17:38 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-29 17:38 [rpms/nss] f44: Address review feedback for DRBG fork handling Rostislav Krasny

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox