From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Rostislav Krasny To: git-commits@fedoraproject.org Subject: [rpms/nss] rawhide: Reseed the freebl DRBG after fork() Date: Wed, 29 Jul 2026 17:43:57 GMT Message-ID: <178534703755.1.11303585140621149195.rpms-nss-c2bfe9182ac7@fedoraproject.org> List-ID: X-Git-Repo: rpms/nss X-Git-Branch: rawhide X-Git-Rev: c2bfe9182ac781ae9e5f459a20ca72be43e8c168 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbnNzCiAgICAgICAgICAgIEJyYW5jaCA6IHJhd2hpZGUKICAgICAgICAgICAg Q29tbWl0IDogYzJiZmU5MTgyYWM3ODFhZTllNWY0NTlhMjBjYTcyYmU0M2U4YzE2OAogICAgICAg ICAgICBBdXRob3IgOiBSb3N0aXNsYXYgS3Jhc255IDxyb3N0aXByb2RldkBnbWFpbC5jb20+CiAg ICAgICAgICAgIERhdGUgICA6IDIwMjYtMDctMjlUMTk6NDI6NDgrMDI6MDAKICAgICAgICAgICAg U3RhdHMgIDogKzEwNi8tMCBpbiAyIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6 Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9uc3MvYy9jMmJmZTkxODJhYzc4MWFlOWU1ZjQ1 OWEyMGNhNzJiZTQzZThjMTY4P2JyYW5jaD1yYXdoaWRlCgogICAgICAgICAgICBMb2c6CiAgICAg ICAgICAgIFJlc2VlZCB0aGUgZnJlZWJsIERSQkcgYWZ0ZXIgZm9yaygpCgpmb3JrKCkgZ2l2ZXMg dGhlIGNoaWxkIGEgdmVyYmF0aW0gY29weSBvZiB0aGVHbG9iYWxSbmcgdG9nZXRoZXIgd2l0aCB0 aGUKUFJfQ2FsbE9uY2UgZmxhZ3MgdGhhdCBtYXJrIGl0IGluc3RhbnRpYXRlZCwgc28gUk5HX1JO R0luaXQoKSBpbiB0aGUgY2hpbGQKaXMgYSBuby1vcCBhbmQgdGhlIGNoaWxkIHJlcGxheXMgdGhl IHBhcmVudCdzIG91dHB1dCBzdHJlYW0uIFJlZ2lzdGVyIGEKcHRocmVhZF9hdGZvcmsgY2hpbGQg aGFuZGxlciB0aGF0IGRpc2NhcmRzIHRoZSBpbmhlcml0ZWQgc3RhdGUsIGZvcmNpbmcgYQpjbGVh biByZWluc3RhbnRpYXRlIGZyb20gc3lzdGVtIGVudHJvcHkgYXQgdGhlIG5leHQgUk5HIHVzZS4K CkFsc28gYWRkIHRoZSBOVUxMIGNoZWNrIFJOR19SYW5kb21VcGRhdGUoKSB3YXMgbWlzc2luZy4g SXRzIHNpYmxpbmcKcHJuZ19HZW5lcmF0ZUdsb2JhbFJhbmRvbUJ5dGVzKCkgYWxyZWFkeSBoYXMg b25lLCBhbmQgd2l0aG91dCBpdCB0aGUKUFJfTG9jaygpIGJlbG93IGRlcmVmZXJlbmNlcyBOVUxM LgoKUmVwb3J0ZWQgYWdhaW5zdCBGaXJlZm94J3MgTGludXggZm9yayBzZXJ2ZXIsIHdoZXJlIGNv bnRlbnQgcHJvY2Vzc2VzCmZvcmtlZCBmcm9tIGEgY29tbW9uIGFuY2VzdG9yIGdlbmVyYXRlZCBp ZGVudGljYWwgVVVJRHMgKG1vemJ6IzIwNTY1MDkpLApidXQgdGhlIGRlZmVjdCBhZmZlY3RzIGFu eSBOU1MgY29uc3VtZXIgdGhhdCBmb3JrcyB3aXRob3V0IGV4ZWMuCgpDby1BdXRob3JlZC1CeTog Q2xhdWRlIE9wdXMgNSA8bm9yZXBseUBhbnRocm9waWMuY29tPgoKLS0tCmRpZmYgLS1naXQgYS9u c3MtMy4xMjUtZHJiZy1yZXNlZWQtYWZ0ZXItZm9yay5wYXRjaCBiL25zcy0zLjEyNS1kcmJnLXJl c2VlZC1hZnRlci1mb3JrLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAu LjlmNzNmODkKLS0tIC9kZXYvbnVsbAorKysgYi9uc3MtMy4xMjUtZHJiZy1yZXNlZWQtYWZ0ZXIt Zm9yay5wYXRjaApAQCAtMCwwICsxLDk4IEBACistLS0gYS9saWIvZnJlZWJsL2RyYmcuYwkyMDI2 LTA3LTI1IDAwOjA5OjQwLjQ1Mjk0MjYxNSArMDMwMAorKysrIGIvbGliL2ZyZWVibC9kcmJnLmMJ MjAyNi0wNy0yNSAwMToxMToyOS4xNjMwNDE4NDIgKzAzMDAKK0BAIC0yMCw2ICsyMCwxMCBAQAor ICNpbmNsdWRlICJzZWNybmcuaCIgLyogZm9yIFJOR19TeXN0ZW1STkcoKSAqLworICNpbmNsdWRl ICJzZWNtcGkuaCIKKyAKKysjaWZkZWYgWFBfVU5JWAorKyNpbmNsdWRlIDxwdGhyZWFkLmg+Cisr I2VuZGlmCisrCisgLyogUFJOR19TRUVETEVOIGRlZmluZWQgaW4gTklTVCBTUCA4MDAtOTAgc2Vj dGlvbiAxMC4xCisgICogZm9yIFNIQS0xLCBTSEEtMjI0LCBhbmQgU0hBLTI1NiBpdCdzIDQ0MCBi aXRzLgorICAqIGZvciBTSEEtMzg0IGFuZCBTSEEtNTEyIGl0J3MgODg4IGJpdHMgKi8KK0BAIC00 NzEsNiArNDc1LDQ1IEBACisgICovCisgc3RhdGljIGNvbnN0IFBSQ2FsbE9uY2VUeXBlIHByaXN0 aW5lQ2FsbE9uY2U7Cisgc3RhdGljIFBSQ2FsbE9uY2VUeXBlIGNvUk5HSW5pdDsKKysKKysjaWZk ZWYgWFBfVU5JWAorK3N0YXRpYyBQUkNhbGxPbmNlVHlwZSBjb1JOR0luaXRBdEZvcms7CisrCisr LyogZm9yaygpIGdpdmVzIHRoZSBjaGlsZCBhIHZlcmJhdGltIGNvcHkgb2YgdGhlIERSQkcgc3Rh dGUsIGluY2x1ZGluZyB0aGUKKysgKiBQUl9DYWxsT25jZSBmbGFncyBtYXJraW5nIGl0IGluc3Rh bnRpYXRlZCwgc28gd2l0aG91dCB0aGlzIHRoZSBjaGlsZAorKyAqIHJlcGxheXMgdGhlIHBhcmVu dCdzIG91dHB1dCBzdHJlYW0uCisrICoKKysgKiBLZWVwIGFzeW5jLXNpZ25hbC1zYWZlIC0tIG5v IGFsbG9jYXRpb24sIGxvY2tzIG9yIEkvTyAtLSBmb3IgY2FsbGVycyB0aGF0CisrICogZm9yayBm cm9tIGEgbXVsdGl0aHJlYWRlZCBwcm9jZXNzOyB0aGUgcmVpbnN0YW50aWF0ZSBpcyBkZWZlcnJl ZCB0byB0aGUKKysgKiBuZXh0IFJORyB1c2UuICBPbmx5IGZvcmsgbWVjaGFuaXNtcyB0aGF0IHJ1 biBhdGZvcmsgaGFuZGxlcnMgYXJlIGNvdmVyZWQuCisrICogTmV2ZXIgcnVuIHRoaXMgYWZ0ZXIg dmZvcmsoMik6IHRoYXQgY2hpbGQgc2hhcmVzIHRoZSBwYXJlbnQncyBhZGRyZXNzCisrICogc3Bh Y2UsIHNvIHRoZSB6ZXJvaW5nIGJlbG93IHdvdWxkIGRlc3Ryb3kgdGhlIGxpdmUgY29udGV4dC4g Ki8KKytzdGF0aWMgdm9pZAorK3JuZ19hdGZvcmtfY2hpbGQodm9pZCkKKyt7CisrICAgIC8qIFpl cm8gdGhlIHN0b3JhZ2UsIG5vdCAqZ2xvYmFscm5nOiBhZnRlciBSTkdfUk5HU2h1dGRvd24oKSB0 aGUgcG9pbnRlcgorKyAgICAgKiBpcyBOVUxMIHdoaWxlIHRoZSBjb250ZXh0IHN0aWxsIGhvbGRz IEMgYW5kIFYgdGhhdCBwcm5nX2ZyZWVSTkdDb250ZXh0CisrICAgICAqIGRlbGliZXJhdGVseSBw cmVzZXJ2ZWQuICBEaXNjYXJkaW5nIHRoZW0gZm9yY2VzIGEgY2xlYW4gcmVpbnN0YW50aWF0ZQor KyAgICAgKiByYXRoZXIgdGhhbiBhIHJlc2VlZCBvdmVyIGluaGVyaXRlZCBzdGF0ZSwgYW5kIGNs ZWFycyB0aGUgc3RhbGUgbG9jaworKyAgICAgKiBwb2ludGVyIHNvIHJuZ19pbml0KCkgYnVpbGRz IGEgZnJlc2ggb25lLiAgVGhlIGluaGVyaXRlZCBQUkxvY2sgaXMKKysgICAgICogbGVha2VkIG9u IHB1cnBvc2U6IGEgdGhyZWFkIHRoYXQgZGlkIG5vdCBzdXJ2aXZlIHRoZSBmb3JrIG1heSBoYXZl IGhlbGQKKysgICAgICogaXQsIHNvIGRlc3Ryb3lpbmcgaXQgd291bGQgYmUgdW5kZWZpbmVkLiAq LworKyAgICBQT1JUX1NhZmVaZXJvKCZ0aGVHbG9iYWxSbmcsIHNpemVvZih0aGVHbG9iYWxSbmcp KTsKKysgICAgZ2xvYmFscm5nID0gTlVMTDsKKysgICAgLyogUmVzZXQgYm90aDogdGhlIGZpcnN0 IG90aGVyd2lzZSBzdXBwcmVzc2VzIHJuZ19pbml0KCkgZW50aXJlbHksIHRoZQorKyAgICAgKiBz ZWNvbmQgbGVhdmVzIHByZXZpb3VzRW50cm9weUhhc2ggemVyb2VkIHdoaWxlIGNsYWltaW5nIGl0 IHdhcyBwcmltZWQuICovCisrICAgIGNvUk5HSW5pdCA9IHByaXN0aW5lQ2FsbE9uY2U7CisrICAg IGNvUk5HSW5pdEVudHJvcHkgPSBwcmlzdGluZUNhbGxPbmNlOworK30KKysKKytzdGF0aWMgUFJT dGF0dXMKKytybmdfcmVnaXN0ZXJBdEZvcmsodm9pZCkKKyt7CisrICAgIHB0aHJlYWRfYXRmb3Jr KE5VTEwsIE5VTEwsIHJuZ19hdGZvcmtfY2hpbGQpOworKyAgICByZXR1cm4gUFJfU1VDQ0VTUzsK Kyt9CisrI2VuZGlmCisrCisgc3RhdGljIFBSU3RhdHVzCisgcm5nX2luaXQodm9pZCkKKyB7CitA QCAtNDc4LDYgKzUyMSwxMiBAQAorICAgICBTRUNTdGF0dXMgcnYgPSBTRUNTdWNjZXNzOworIAor ICAgICBpZiAoZ2xvYmFscm5nID09IE5VTEwpIHsKKysjaWZkZWYgWFBfVU5JWAorKyAgICAgICAg LyogT25jZSBwZXIgcHJvY2VzczogdGhlIHJlZ2lzdHJhdGlvbiBzdXJ2aXZlcyBmb3JrKCkgYW5k CisrICAgICAgICAgKiBjb1JOR0luaXRBdEZvcmsgaXMgbmV2ZXIgcmVzZXQsIHNvIHJlcGVhdGVk IGZvcmtzIGNhbm5vdCBzdGFjaworKyAgICAgICAgICogZHVwbGljYXRlIGhhbmRsZXJzLiAqLwor KyAgICAgICAgUFJfQ2FsbE9uY2UoJmNvUk5HSW5pdEF0Rm9yaywgcm5nX3JlZ2lzdGVyQXRGb3Jr KTsKKysjZW5kaWYKKyAgICAgICAgIC8qIGJ5dGVzIG5lZWRzIHRvIGhhdmUgZW5vdWdoIHNwYWNl IHRvIGhvbGQKKyAgICAgICAgICAqIGEgU0hBMjU2IGhhc2ggdmFsdWUuIEJsb3cgdXAgYXQgY29t cGlsZSB0aW1lIGlmIHRoaXMgaXNuJ3QgdHJ1ZSAqLworICAgICAgICAgUFJfU1RBVElDX0FTU0VS VChzaXplb2YoYnl0ZXMpID49IFNIQTI1Nl9MRU5HVEgpOworQEAgLTYxNyw2ICs2NjYsMTQgQEAK KyAgICAgUFJfU1RBVElDX0FTU0VSVChzaXplb2Yoc2l6ZV90KSA8PSA0KTsKKyAjZW5kaWYKKyAK KysgICAgLyogQWJzZW50IGJlZm9yZSB0aGUgZmlyc3QgUk5HX1JOR0luaXQoKSwgYW5kIGluIGEg Y2hpbGQgdW50aWwgdGhlCisrICAgICAqIGluaGVyaXRlZCBzdGF0ZSBpcyByZWJ1aWx0LiAgcHJu Z19HZW5lcmF0ZUdsb2JhbFJhbmRvbUJ5dGVzKCkgbWFrZXMgdGhlCisrICAgICAqIHNhbWUgY2hl Y2s7IHdpdGhvdXQgaXQgdGhlIFBSX0xvY2soKSBiZWxvdyBkZXJlZmVyZW5jZXMgTlVMTC4gKi8K KysgICAgaWYgKGdsb2JhbHJuZyA9PSBOVUxMKSB7CisrICAgICAgICBQT1JUX1NldEVycm9yKFNF Q19FUlJPUl9MSUJSQVJZX0ZBSUxVUkUpOworKyAgICAgICAgcmV0dXJuIFNFQ0ZhaWx1cmU7Cisr ICAgIH0KKysKKyAgICAgUFJfTG9jayhnbG9iYWxybmctPmxvY2spOworICAgICAvKiBpZiB3ZSdy ZSBwYXNzZWQgbW9yZSB0aGFuIG91ciBhZGRpdGlvbmFsRGF0YUNhY2hlLCBzaW1wbHkKKyAgICAg ICogY2FsbCByZXNlZWQgd2l0aCB0aGF0IGRhdGEgKi8KK0BAIC03MzYsMTAgKzc5Myw5IEBACisg dm9pZAorIFJOR19STkdTaHV0ZG93bih2b2lkKQorIHsKKyAgICAgLyogY2hlY2sgZm9yIGEgdmFs aWQgZ2xvYmFsIFJORyBjb250ZXh0ICovCistICAgIFBPUlRfQXNzZXJ0KGdsb2JhbHJuZyAhPSBO VUxMKTsKKyAgICAgaWYgKGdsb2JhbHJuZyA9PSBOVUxMKSB7CisgICAgICAgICAvKiBTaG91bGQg c2V0IGEgIm5vdCBpbml0aWFsaXplZCIgZXJyb3IgY29kZS4gKi8KKyAgICAgICAgIFBPUlRfU2V0 RXJyb3IoU0VDX0VSUk9SX05PX01FTU9SWSk7CisgICAgICAgICByZXR1cm47CisgICAgIH0KCmRp ZmYgLS1naXQgYS9uc3Muc3BlYyBiL25zcy5zcGVjCmluZGV4IGQ0MTU0ZTcuLjA0YWYzMjEgMTAw NjQ0Ci0tLSBhL25zcy5zcGVjCisrKyBiL25zcy5zcGVjCkBAIC0xNDUsNiArMTQ1LDEwIEBAIFBh dGNoNjY6ICAgICAgICAgIG5zcy0zLjExOC1tbC1kc2EtdGxzLXRlc3QucGF0Y2gKIFBhdGNoNjc6 ICAgICAgICAgIG5zcy0zLjExOC1tbC1kc2EtdW5pdHRlc3RzLnBhdGNoCiBQYXRjaDY4OiAgICAg ICAgICBuc3MtMy4xMjMtZml4LW1sZHNhLWltcG9ydC1yZWdlbmVyYXRpb24ucGF0Y2gKIAorIyBS ZXNlZWQgdGhlIGZyZWVibCBEUkJHIGluIHRoZSBjaGlsZCBhZnRlciBmb3JrKCksIHNvIGZvcmtl ZCBjaGlsZHJlbiBkbyBub3QKKyMgcmVwbGF5IHRoZSBwYXJlbnQncyByYW5kb20gc3RyZWFtICht b3pieiMyMDU2NTA5KQorUGF0Y2g3MDogICAgICAgICAgbnNzLTMuMTI1LWRyYmctcmVzZWVkLWFm dGVyLWZvcmsucGF0Y2gKKwogUGF0Y2gxMDA6ICAgICAgICAgbnNwci1jb25maWctcGMucGF0Y2gK IFBhdGNoMTAxOiAgICAgICAgIG5zcHItZ2NjLWF0b21pY3MucGF0Y2gKIApAQCAtMTA5Niw2ICsx MTAwLDEwIEBAIGZpCiAqIFR1ZSBKdWwgMjggMjAyNiBGcmFudGlzZWsgS3JlbnplbG9rIDxma3Jl bnplbEByZWRoYXQuY29tPiAtIDMuMTI2LjAtMQogLSBVcGRhdGUgTlNTIHRvIDMuMTI2LjAKIAor KiBTYXQgSnVsIDI1IDIwMjYgUm9zdGlzbGF2IEtyYXNueSA8cm9zdGlwcm9kZXZAZ21haWwuY29t PiAtIDMuMTI1LjAtMgorLSBSZXNlZWQgdGhlIGZyZWVibCBEUkJHIGFmdGVyIGZvcmsoKSBzbyBm b3JrZWQgY2hpbGRyZW4gZG8gbm90IHJlcGxheSB0aGUKKyAgcGFyZW50J3MgcmFuZG9tIHN0cmVh bSAoRmlyZWZveCBmb3JrIHNlcnZlciBkdXBsaWNhdGUgVVVJRHMgLyBjcnlwdG8gb3V0cHV0KQor CiAqIFRodSBKdWwgMTYgMjAyNiBGZWRvcmEgUmVsZWFzZSBFbmdpbmVlcmluZyA8cmVsZW5nQGZl ZG9yYXByb2plY3Qub3JnPiAtIDMuMTI1LjAtMwogLSBSZWJ1aWx0IGZvciBodHRwczovL2ZlZG9y YXByb2plY3Qub3JnL3dpa2kvRmVkb3JhXzQ1X01hc3NfUmVidWlsZAogCg==