On Thu, 20 Jan 2011 04:46:20 +0100
Diego Elio Pettenò <[email protected]> wrote:

> The STDLL objects are exporting all their interface, including the
> convenience functions that includes crypto and hash functions that
> shouldn't be used by the host software using OpenCryptoki.
> 
> This is a tentative patch that hides all the functions not starting with
> SC_ and ST_ so that they are not visible to host functions, and leaves them
> visible only from the module itself.
> ---
>  usr/lib/pkcs11/soft_stdll/Makefile.am |    3 ++-
>  usr/lib/pkcs11/tpm_stdll/Makefile.am  |    3 ++-
>  2 files changed, 4 insertions(+), 2 deletions(-)
> 
> diff --git a/usr/lib/pkcs11/soft_stdll/Makefile.am 
> b/usr/lib/pkcs11/soft_stdll/Makefile.am
> index 7d3ed3d..3dc3a0e 100644
> --- a/usr/lib/pkcs11/soft_stdll/Makefile.am
> +++ b/usr/lib/pkcs11/soft_stdll/Makefile.am
> @@ -1,7 +1,8 @@
>  nobase_lib_LTLIBRARIES = opencryptoki/stdll/libpkcs11_sw.la
> 
>  opencryptoki_stdll_libpkcs11_sw_la_LDFLAGS = -shared -Wl,-Bsymbolic  \
> -                                          -lc -lpthread -lcrypto
> +                                          -lc -lpthread -lcrypto \
> +                                          -export-symbols-regex '^S[CT]_'

hmm, I'm not sure. Couldn't we declare everything we don't want to be
used externally as static? More work but also cleaner and more
maintainable?

 -Klaus

-- 
Klaus Heinrich Kiwi | [email protected] | http://blog.klauskiwi.com
Open Source Security blog :     http://www.ratliff.net/blog
IBM Linux Technology Center :   http://www.ibm.com/linux/ltc

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Opencryptoki-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opencryptoki-tech

Reply via email to