Home GnuPG

fips: Integrity check improvement, with only loadable segments.

Description

fips: Integrity check improvement, with only loadable segments.

* configure.ac (READELF): Check the tool.
* src/Makefile.am (libgcrypt.so.hmac): Use genhmac.sh with hmac256.
* src/fips.c (get_file_offsets): Rename from get_file_offset.
Determine the OFFSET2 at the end of loadable segments, too.
Add fixup of the ELF header to exclude section information.
(hmac256_check): Finish scanning at the end of loadble segments.
* src/genhmac.sh: New.

This change fixes the build with ld.gold.

  • GnuPG-bug-id: T5835
  • Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>

Details

Provenance
gniibeAuthored on Feb 16 2022, 6:06 AM
Parents
rCb2f110f99626: build: Clean up acinclude.m4.
Branches
Unknown
Tags
Unknown
Tasks
T5835: libgcrypt: More robust/portable integrity check