mirror of
https://github.com/openwrt/packages.git
synced 2025-02-07 12:49:50 +00:00
e42c845039
Includes fix for CVE-2023-40217 (Bypass TLS handshake on closed sockets). This also: * Remove 027-install-python3-symlink-after-stdlib.patch This was merged upstream in https://github.com/python/cpython/pull/104693. * Remove fix for unnecessary linking with libbsd (60bf01cb606344619e002901646171da1e69c0f9) This was fixed upstream in https://github.com/python/cpython/pull/105236. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
66 lines
2.1 KiB
Diff
66 lines
2.1 KiB
Diff
--- a/Modules/_hashopenssl.c
|
|
+++ b/Modules/_hashopenssl.c
|
|
@@ -45,10 +45,18 @@
|
|
|
|
#define MUNCH_SIZE INT_MAX
|
|
|
|
+#ifdef NID_id_scrypt
|
|
#define PY_OPENSSL_HAS_SCRYPT 1
|
|
+#endif
|
|
+#ifdef NID_sha3_256
|
|
#define PY_OPENSSL_HAS_SHA3 1
|
|
+#endif
|
|
+#ifdef NID_shake256
|
|
#define PY_OPENSSL_HAS_SHAKE 1
|
|
+#endif
|
|
+#ifdef NID_blake2s256
|
|
#define PY_OPENSSL_HAS_BLAKE2 1
|
|
+#endif
|
|
|
|
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
|
|
#define PY_EVP_MD EVP_MD
|
|
@@ -120,19 +128,27 @@ static const py_hashentry_t py_hashes[]
|
|
PY_HASH_ENTRY(Py_hash_sha384, "SHA384", SN_sha384, NID_sha384),
|
|
PY_HASH_ENTRY(Py_hash_sha512, "SHA512", SN_sha512, NID_sha512),
|
|
/* truncated sha2 */
|
|
+#ifdef NID_sha512_256
|
|
PY_HASH_ENTRY(Py_hash_sha512_224, "SHA512_224", SN_sha512_224, NID_sha512_224),
|
|
PY_HASH_ENTRY(Py_hash_sha512_256, "SHA512_256", SN_sha512_256, NID_sha512_256),
|
|
+#endif
|
|
/* sha3 */
|
|
+#ifdef PY_OPENSSL_HAS_SHA3
|
|
PY_HASH_ENTRY(Py_hash_sha3_224, NULL, SN_sha3_224, NID_sha3_224),
|
|
PY_HASH_ENTRY(Py_hash_sha3_256, NULL, SN_sha3_256, NID_sha3_256),
|
|
PY_HASH_ENTRY(Py_hash_sha3_384, NULL, SN_sha3_384, NID_sha3_384),
|
|
PY_HASH_ENTRY(Py_hash_sha3_512, NULL, SN_sha3_512, NID_sha3_512),
|
|
+#endif
|
|
/* sha3 shake */
|
|
+#ifdef PY_OPENSSL_HAS_SHAKE
|
|
PY_HASH_ENTRY(Py_hash_shake_128, NULL, SN_shake128, NID_shake128),
|
|
PY_HASH_ENTRY(Py_hash_shake_256, NULL, SN_shake256, NID_shake256),
|
|
+#endif
|
|
/* blake2 digest */
|
|
+#ifdef PY_OPENSSL_HAS_BLAKE2
|
|
PY_HASH_ENTRY(Py_hash_blake2s, "blake2s256", SN_blake2s256, NID_blake2s256),
|
|
PY_HASH_ENTRY(Py_hash_blake2b, "blake2b512", SN_blake2b512, NID_blake2b512),
|
|
+#endif
|
|
PY_HASH_ENTRY(NULL, NULL, NULL, 0),
|
|
};
|
|
|
|
@@ -874,11 +890,15 @@ py_evp_fromname(PyObject *module, const
|
|
goto exit;
|
|
}
|
|
|
|
+#ifndef EVP_MD_FLAG_XOF
|
|
+ type = get_hashlib_state(module)->EVPtype;
|
|
+#else
|
|
if ((EVP_MD_flags(digest) & EVP_MD_FLAG_XOF) == EVP_MD_FLAG_XOF) {
|
|
type = get_hashlib_state(module)->EVPXOFtype;
|
|
} else {
|
|
type = get_hashlib_state(module)->EVPtype;
|
|
}
|
|
+#endif
|
|
|
|
self = newEVPobject(type);
|
|
if (self == NULL) {
|