From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Rostislav Krasny To: git-commits@fedoraproject.org Subject: [rpms/nss] f43: Reseed the freebl DRBG after fork() Date: Fri, 31 Jul 2026 09:59:10 GMT Message-ID: <178549195022.1.7775070497143867511.rpms-nss-22dc31a9a2af@fedoraproject.org> List-ID: X-Git-Repo: rpms/nss X-Git-Branch: f43 X-Git-Rev: 22dc31a9a2af96dfeb1e06b452d299f0aa22ddce ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbnNzCiAgICAgICAgICAgIEJyYW5jaCA6IGY0MwogICAgICAgICAgICBDb21t aXQgOiAyMmRjMzFhOWEyYWY5NmRmZWIxZTA2YjQ1MmQyOTlmMGFhMjJkZGNlCiAgICAgICAgICAg IEF1dGhvciA6IFJvc3Rpc2xhdiBLcmFzbnkgPHJvc3RpcHJvZGV2QGdtYWlsLmNvbT4KICAgICAg ICAgICAgRGF0ZSAgIDogMjAyNi0wNy0zMFQxNTozMjozMCswMjowMAogICAgICAgICAgICBTdGF0 cyAgOiArMTA3Ly0xIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3Ny Yy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL25zcy9jLzIyZGMzMWE5YTJhZjk2ZGZlYjFlMDZiNDUy ZDI5OWYwYWEyMmRkY2U/YnJhbmNoPWY0MwoKICAgICAgICAgICAgTG9nOgogICAgICAgICAgICBS ZXNlZWQgdGhlIGZyZWVibCBEUkJHIGFmdGVyIGZvcmsoKQoKZm9yaygpIGdpdmVzIHRoZSBjaGls ZCBhIHZlcmJhdGltIGNvcHkgb2YgdGhlR2xvYmFsUm5nIHRvZ2V0aGVyIHdpdGggdGhlClBSX0Nh bGxPbmNlIGZsYWdzIHRoYXQgbWFyayBpdCBpbnN0YW50aWF0ZWQsIHNvIFJOR19STkdJbml0KCkg aW4gdGhlIGNoaWxkCmlzIGEgbm8tb3AgYW5kIHRoZSBjaGlsZCByZXBsYXlzIHRoZSBwYXJlbnQn cyBvdXRwdXQgc3RyZWFtLiBSZWdpc3RlciBhCnB0aHJlYWRfYXRmb3JrIGNoaWxkIGhhbmRsZXIg dGhhdCBkaXNjYXJkcyB0aGUgaW5oZXJpdGVkIHN0YXRlLCBmb3JjaW5nIGEKY2xlYW4gcmVpbnN0 YW50aWF0ZSBmcm9tIHN5c3RlbSBlbnRyb3B5IGF0IHRoZSBuZXh0IFJORyB1c2UuCgpBbHNvIGFk ZCB0aGUgTlVMTCBjaGVjayBSTkdfUmFuZG9tVXBkYXRlKCkgd2FzIG1pc3NpbmcuIEl0cyBzaWJs aW5nCnBybmdfR2VuZXJhdGVHbG9iYWxSYW5kb21CeXRlcygpIGFscmVhZHkgaGFzIG9uZSwgYW5k IHdpdGhvdXQgaXQgdGhlClBSX0xvY2soKSBiZWxvdyBkZXJlZmVyZW5jZXMgTlVMTC4KClJlcG9y dGVkIGFnYWluc3QgRmlyZWZveCdzIExpbnV4IGZvcmsgc2VydmVyLCB3aGVyZSBjb250ZW50IHBy b2Nlc3Nlcwpmb3JrZWQgZnJvbSBhIGNvbW1vbiBhbmNlc3RvciBnZW5lcmF0ZWQgaWRlbnRpY2Fs IFVVSURzIChtb3pieiMyMDU2NTA5KSwKYnV0IHRoZSBkZWZlY3QgYWZmZWN0cyBhbnkgTlNTIGNv bnN1bWVyIHRoYXQgZm9ya3Mgd2l0aG91dCBleGVjLgoKQ28tQXV0aG9yZWQtQnk6IENsYXVkZSBP cHVzIDUgPG5vcmVwbHlAYW50aHJvcGljLmNvbT4KCi0tLQpkaWZmIC0tZ2l0IGEvbnNzLTMuMTI1 LWRyYmctcmVzZWVkLWFmdGVyLWZvcmsucGF0Y2ggYi9uc3MtMy4xMjUtZHJiZy1yZXNlZWQtYWZ0 ZXItZm9yay5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi45ZjczZjg5 Ci0tLSAvZGV2L251bGwKKysrIGIvbnNzLTMuMTI1LWRyYmctcmVzZWVkLWFmdGVyLWZvcmsucGF0 Y2gKQEAgLTAsMCArMSw5OCBAQAorLS0tIGEvbGliL2ZyZWVibC9kcmJnLmMJMjAyNi0wNy0yNSAw MDowOTo0MC40NTI5NDI2MTUgKzAzMDAKKysrKyBiL2xpYi9mcmVlYmwvZHJiZy5jCTIwMjYtMDct MjUgMDE6MTE6MjkuMTYzMDQxODQyICswMzAwCitAQCAtMjAsNiArMjAsMTAgQEAKKyAjaW5jbHVk ZSAic2Vjcm5nLmgiIC8qIGZvciBSTkdfU3lzdGVtUk5HKCkgKi8KKyAjaW5jbHVkZSAic2VjbXBp LmgiCisgCisrI2lmZGVmIFhQX1VOSVgKKysjaW5jbHVkZSA8cHRocmVhZC5oPgorKyNlbmRpZgor KworIC8qIFBSTkdfU0VFRExFTiBkZWZpbmVkIGluIE5JU1QgU1AgODAwLTkwIHNlY3Rpb24gMTAu MQorICAqIGZvciBTSEEtMSwgU0hBLTIyNCwgYW5kIFNIQS0yNTYgaXQncyA0NDAgYml0cy4KKyAg KiBmb3IgU0hBLTM4NCBhbmQgU0hBLTUxMiBpdCdzIDg4OCBiaXRzICovCitAQCAtNDcxLDYgKzQ3 NSw0NSBAQAorICAqLworIHN0YXRpYyBjb25zdCBQUkNhbGxPbmNlVHlwZSBwcmlzdGluZUNhbGxP bmNlOworIHN0YXRpYyBQUkNhbGxPbmNlVHlwZSBjb1JOR0luaXQ7CisrCisrI2lmZGVmIFhQX1VO SVgKKytzdGF0aWMgUFJDYWxsT25jZVR5cGUgY29STkdJbml0QXRGb3JrOworKworKy8qIGZvcmso KSBnaXZlcyB0aGUgY2hpbGQgYSB2ZXJiYXRpbSBjb3B5IG9mIHRoZSBEUkJHIHN0YXRlLCBpbmNs dWRpbmcgdGhlCisrICogUFJfQ2FsbE9uY2UgZmxhZ3MgbWFya2luZyBpdCBpbnN0YW50aWF0ZWQs IHNvIHdpdGhvdXQgdGhpcyB0aGUgY2hpbGQKKysgKiByZXBsYXlzIHRoZSBwYXJlbnQncyBvdXRw dXQgc3RyZWFtLgorKyAqCisrICogS2VlcCBhc3luYy1zaWduYWwtc2FmZSAtLSBubyBhbGxvY2F0 aW9uLCBsb2NrcyBvciBJL08gLS0gZm9yIGNhbGxlcnMgdGhhdAorKyAqIGZvcmsgZnJvbSBhIG11 bHRpdGhyZWFkZWQgcHJvY2VzczsgdGhlIHJlaW5zdGFudGlhdGUgaXMgZGVmZXJyZWQgdG8gdGhl CisrICogbmV4dCBSTkcgdXNlLiAgT25seSBmb3JrIG1lY2hhbmlzbXMgdGhhdCBydW4gYXRmb3Jr IGhhbmRsZXJzIGFyZSBjb3ZlcmVkLgorKyAqIE5ldmVyIHJ1biB0aGlzIGFmdGVyIHZmb3JrKDIp OiB0aGF0IGNoaWxkIHNoYXJlcyB0aGUgcGFyZW50J3MgYWRkcmVzcworKyAqIHNwYWNlLCBzbyB0 aGUgemVyb2luZyBiZWxvdyB3b3VsZCBkZXN0cm95IHRoZSBsaXZlIGNvbnRleHQuICovCisrc3Rh dGljIHZvaWQKKytybmdfYXRmb3JrX2NoaWxkKHZvaWQpCisreworKyAgICAvKiBaZXJvIHRoZSBz dG9yYWdlLCBub3QgKmdsb2JhbHJuZzogYWZ0ZXIgUk5HX1JOR1NodXRkb3duKCkgdGhlIHBvaW50 ZXIKKysgICAgICogaXMgTlVMTCB3aGlsZSB0aGUgY29udGV4dCBzdGlsbCBob2xkcyBDIGFuZCBW IHRoYXQgcHJuZ19mcmVlUk5HQ29udGV4dAorKyAgICAgKiBkZWxpYmVyYXRlbHkgcHJlc2VydmVk LiAgRGlzY2FyZGluZyB0aGVtIGZvcmNlcyBhIGNsZWFuIHJlaW5zdGFudGlhdGUKKysgICAgICog cmF0aGVyIHRoYW4gYSByZXNlZWQgb3ZlciBpbmhlcml0ZWQgc3RhdGUsIGFuZCBjbGVhcnMgdGhl IHN0YWxlIGxvY2sKKysgICAgICogcG9pbnRlciBzbyBybmdfaW5pdCgpIGJ1aWxkcyBhIGZyZXNo IG9uZS4gIFRoZSBpbmhlcml0ZWQgUFJMb2NrIGlzCisrICAgICAqIGxlYWtlZCBvbiBwdXJwb3Nl OiBhIHRocmVhZCB0aGF0IGRpZCBub3Qgc3Vydml2ZSB0aGUgZm9yayBtYXkgaGF2ZSBoZWxkCisr ICAgICAqIGl0LCBzbyBkZXN0cm95aW5nIGl0IHdvdWxkIGJlIHVuZGVmaW5lZC4gKi8KKysgICAg UE9SVF9TYWZlWmVybygmdGhlR2xvYmFsUm5nLCBzaXplb2YodGhlR2xvYmFsUm5nKSk7CisrICAg IGdsb2JhbHJuZyA9IE5VTEw7CisrICAgIC8qIFJlc2V0IGJvdGg6IHRoZSBmaXJzdCBvdGhlcndp c2Ugc3VwcHJlc3NlcyBybmdfaW5pdCgpIGVudGlyZWx5LCB0aGUKKysgICAgICogc2Vjb25kIGxl YXZlcyBwcmV2aW91c0VudHJvcHlIYXNoIHplcm9lZCB3aGlsZSBjbGFpbWluZyBpdCB3YXMgcHJp bWVkLiAqLworKyAgICBjb1JOR0luaXQgPSBwcmlzdGluZUNhbGxPbmNlOworKyAgICBjb1JOR0lu aXRFbnRyb3B5ID0gcHJpc3RpbmVDYWxsT25jZTsKKyt9CisrCisrc3RhdGljIFBSU3RhdHVzCisr cm5nX3JlZ2lzdGVyQXRGb3JrKHZvaWQpCisreworKyAgICBwdGhyZWFkX2F0Zm9yayhOVUxMLCBO VUxMLCBybmdfYXRmb3JrX2NoaWxkKTsKKysgICAgcmV0dXJuIFBSX1NVQ0NFU1M7CisrfQorKyNl bmRpZgorKworIHN0YXRpYyBQUlN0YXR1cworIHJuZ19pbml0KHZvaWQpCisgeworQEAgLTQ3OCw2 ICs1MjEsMTIgQEAKKyAgICAgU0VDU3RhdHVzIHJ2ID0gU0VDU3VjY2VzczsKKyAKKyAgICAgaWYg KGdsb2JhbHJuZyA9PSBOVUxMKSB7CisrI2lmZGVmIFhQX1VOSVgKKysgICAgICAgIC8qIE9uY2Ug cGVyIHByb2Nlc3M6IHRoZSByZWdpc3RyYXRpb24gc3Vydml2ZXMgZm9yaygpIGFuZAorKyAgICAg ICAgICogY29STkdJbml0QXRGb3JrIGlzIG5ldmVyIHJlc2V0LCBzbyByZXBlYXRlZCBmb3JrcyBj YW5ub3Qgc3RhY2sKKysgICAgICAgICAqIGR1cGxpY2F0ZSBoYW5kbGVycy4gKi8KKysgICAgICAg IFBSX0NhbGxPbmNlKCZjb1JOR0luaXRBdEZvcmssIHJuZ19yZWdpc3RlckF0Rm9yayk7CisrI2Vu ZGlmCisgICAgICAgICAvKiBieXRlcyBuZWVkcyB0byBoYXZlIGVub3VnaCBzcGFjZSB0byBob2xk CisgICAgICAgICAgKiBhIFNIQTI1NiBoYXNoIHZhbHVlLiBCbG93IHVwIGF0IGNvbXBpbGUgdGlt ZSBpZiB0aGlzIGlzbid0IHRydWUgKi8KKyAgICAgICAgIFBSX1NUQVRJQ19BU1NFUlQoc2l6ZW9m KGJ5dGVzKSA+PSBTSEEyNTZfTEVOR1RIKTsKK0BAIC02MTcsNiArNjY2LDE0IEBACisgICAgIFBS X1NUQVRJQ19BU1NFUlQoc2l6ZW9mKHNpemVfdCkgPD0gNCk7CisgI2VuZGlmCisgCisrICAgIC8q IEFic2VudCBiZWZvcmUgdGhlIGZpcnN0IFJOR19STkdJbml0KCksIGFuZCBpbiBhIGNoaWxkIHVu dGlsIHRoZQorKyAgICAgKiBpbmhlcml0ZWQgc3RhdGUgaXMgcmVidWlsdC4gIHBybmdfR2VuZXJh dGVHbG9iYWxSYW5kb21CeXRlcygpIG1ha2VzIHRoZQorKyAgICAgKiBzYW1lIGNoZWNrOyB3aXRo b3V0IGl0IHRoZSBQUl9Mb2NrKCkgYmVsb3cgZGVyZWZlcmVuY2VzIE5VTEwuICovCisrICAgIGlm IChnbG9iYWxybmcgPT0gTlVMTCkgeworKyAgICAgICAgUE9SVF9TZXRFcnJvcihTRUNfRVJST1Jf TElCUkFSWV9GQUlMVVJFKTsKKysgICAgICAgIHJldHVybiBTRUNGYWlsdXJlOworKyAgICB9Cisr CisgICAgIFBSX0xvY2soZ2xvYmFscm5nLT5sb2NrKTsKKyAgICAgLyogaWYgd2UncmUgcGFzc2Vk IG1vcmUgdGhhbiBvdXIgYWRkaXRpb25hbERhdGFDYWNoZSwgc2ltcGx5CisgICAgICAqIGNhbGwg cmVzZWVkIHdpdGggdGhhdCBkYXRhICovCitAQCAtNzM2LDEwICs3OTMsOSBAQAorIHZvaWQKKyBS TkdfUk5HU2h1dGRvd24odm9pZCkKKyB7CisgICAgIC8qIGNoZWNrIGZvciBhIHZhbGlkIGdsb2Jh bCBSTkcgY29udGV4dCAqLworLSAgICBQT1JUX0Fzc2VydChnbG9iYWxybmcgIT0gTlVMTCk7Cisg ICAgIGlmIChnbG9iYWxybmcgPT0gTlVMTCkgeworICAgICAgICAgLyogU2hvdWxkIHNldCBhICJu b3QgaW5pdGlhbGl6ZWQiIGVycm9yIGNvZGUuICovCisgICAgICAgICBQT1JUX1NldEVycm9yKFNF Q19FUlJPUl9OT19NRU1PUlkpOworICAgICAgICAgcmV0dXJuOworICAgICB9CgpkaWZmIC0tZ2l0 IGEvbnNzLnNwZWMgYi9uc3Muc3BlYwppbmRleCA1YTIzYzVmLi43OTAxMDA1IDEwMDY0NAotLS0g YS9uc3Muc3BlYworKysgYi9uc3Muc3BlYwpAQCAtMyw3ICszLDcgQEAKICMgTk9URTogVG8gYXZv aWQgTlZSIGNsYXNoZXMgb2YgbnNwciogcGFja2FnZXM6CiAjIC0gcmVzZXQgJSV7bnNwcl9yZWxl YXNlfSB0byAxLCB3aGVuIHVwZGF0aW5nICUle25zcHJfdmVyc2lvbn0KICMgLSBpbmNyZW1lbnQg JSV7bnNwcl92ZXJzaW9ufSwgd2hlbiB1cGRhdGluZyB0aGUgTlNTIHBhcnQgb25seQotJWdsb2Jh bCBiYXNlcmVsZWFzZSAxCislZ2xvYmFsIGJhc2VyZWxlYXNlIDIKICVnbG9iYWwgbnNzX3JlbGVh c2UgJWJhc2VyZWxlYXNlCiAjIHVzZSAiJSVnbG9iYWwgbnNwcl9yZWxlYXNlICUlWyUlYmFzZXJl bGVhc2Urbl0iIHRvIGhhbmRsZSBvZmZzZXRzIHdoZW4KICMgcmVsZWFzZSBudW1iZXIgYmV0d2Vl biBuc3MgYW5kIG5zcHIgYXJlIGRpZmZlcmVudC4KQEAgLTE0Niw2ICsxNDYsMTAgQEAgUGF0Y2g2 NjogICAgICAgICAgbnNzLTMuMTE4LW1sLWRzYS10bHMtdGVzdC5wYXRjaAogUGF0Y2g2NzogICAg ICAgICAgbnNzLTMuMTE4LW1sLWRzYS11bml0dGVzdHMucGF0Y2gKIFBhdGNoNjg6ICAgICAgICAg IG5zcy0zLjEyMy1maXgtbWxkc2EtaW1wb3J0LXJlZ2VuZXJhdGlvbi5wYXRjaAogCisjIFJlc2Vl ZCB0aGUgZnJlZWJsIERSQkcgaW4gdGhlIGNoaWxkIGFmdGVyIGZvcmsoKSwgc28gZm9ya2VkIGNo aWxkcmVuIGRvIG5vdAorIyByZXBsYXkgdGhlIHBhcmVudCdzIHJhbmRvbSBzdHJlYW0gKG1vemJ6 IzIwNTY1MDkpCitQYXRjaDcwOiAgICAgICAgICBuc3MtMy4xMjUtZHJiZy1yZXNlZWQtYWZ0ZXIt Zm9yay5wYXRjaAorCiBQYXRjaDEwMDogICAgICAgICBuc3ByLWNvbmZpZy1wYy5wYXRjaAogUGF0 Y2gxMDE6ICAgICAgICAgbnNwci1nY2MtYXRvbWljcy5wYXRjaAogCkBAIC0xMDkzLDYgKzEwOTcs MTAgQEAgZmkKIAogCiAlY2hhbmdlbG9nCisqIFNhdCBKdWwgMjUgMjAyNiBSb3N0aXNsYXYgS3Jh c255IDxyb3N0aXByb2RldkBnbWFpbC5jb20+IC0gMy4xMjUuMC0yCistIFJlc2VlZCB0aGUgZnJl ZWJsIERSQkcgYWZ0ZXIgZm9yaygpIHNvIGZvcmtlZCBjaGlsZHJlbiBkbyBub3QgcmVwbGF5IHRo ZQorICBwYXJlbnQncyByYW5kb20gc3RyZWFtIChGaXJlZm94IGZvcmsgc2VydmVyIGR1cGxpY2F0 ZSBVVUlEcyAvIGNyeXB0byBvdXRwdXQpCisKICogVGh1IEp1biAxOCAyMDI2IEZyYW50aXNlayBL cmVuemVsb2sgPGZrcmVuemVsQHJlZGhhdC5jb20+IC0gMy4xMjUuMC0xCiAtIFVwZGF0ZSBOU1Mg dG8gMy4xMjUuMAogLSBGaXggTlNQUiB2ZXJzaW9uaW5nIHNjaGVtZQo=