Hello community, here is the log from the commit of package openCryptoki for openSUSE:Factory checked in at 2019-02-15 10:04:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openCryptoki (Old) and /work/SRC/openSUSE:Factory/.openCryptoki.new.28833 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openCryptoki" Fri Feb 15 10:04:16 2019 rev:51 rq:676277 version:3.11.0 Changes: -------- --- /work/SRC/openSUSE:Factory/openCryptoki/openCryptoki.changes 2018-12-07 14:36:01.143025151 +0100 +++ /work/SRC/openSUSE:Factory/.openCryptoki.new.28833/openCryptoki.changes 2019-02-15 10:05:10.459571978 +0100 @@ -1,0 +2,6 @@ +Fri Feb 15 05:22:55 UTC 2019 - mp...@suse.com + +- Added ocki-3.11-Fix-target_list-passing-for-EP11-session.patch + (bsc#1123988) + +------------------------------------------------------------------- New: ---- ocki-3.11-Fix-target_list-passing-for-EP11-session.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openCryptoki.spec ++++++ --- /var/tmp/diff_new_pack.BLEY64/_old 2019-02-15 10:05:11.015571798 +0100 +++ /var/tmp/diff_new_pack.BLEY64/_new 2019-02-15 10:05:11.019571797 +0100 @@ -1,7 +1,7 @@ # # spec file for package openCryptoki # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -40,6 +40,7 @@ # Patch 1 is needed because group pkcs11 doesn't exist in the build environment # and because we don't want(?) various file and directory permissions to be 0700. Patch1: ocki-3.11-remove-make-install-chgrp.patch +Patch2: ocki-3.11-Fix-target_list-passing-for-EP11-session.patch BuildRequires: bison BuildRequires: dos2unix BuildRequires: flex @@ -131,6 +132,7 @@ %prep %setup -q -n %{oc_cvs_tag}-%{version} %patch1 -p1 +%patch2 -p1 cp %{SOURCE2} . ++++++ ocki-3.11-Fix-target_list-passing-for-EP11-session.patch ++++++ >From 1dae7c15e7bc3bb5b5aad72b851e0b9cd328bb0b Mon Sep 17 00:00:00 2001 From: Ingo Franzki <ifran...@linux.ibm.com> Date: Mon, 19 Nov 2018 13:30:09 +0100 Subject: [PATCH] EP11: Fix target_list passing for EP11-session logon/logoff The target list is passed incorrectly to the handle_all_ep11_cards() function. Dependent on memory content, this can cause it to fail processing all EP11 cards. This will most likely cause a CKR_DEVICE_ERROR to be returned by C_Login when the STRICT_SESSION and/or VHSM_MODE is enabled in the ep11tok.conf config file. Signed-off-by: Ingo Franzki <ifran...@linux.ibm.com> --- usr/lib/ep11_stdll/ep11_specific.c | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/usr/lib/ep11_stdll/ep11_specific.c b/usr/lib/ep11_stdll/ep11_specific.c index 2129762f..05332429 100644 --- a/usr/lib/ep11_stdll/ep11_specific.c +++ b/usr/lib/ep11_stdll/ep11_specific.c @@ -7600,7 +7600,7 @@ CK_RV ep11tok_login_session(STDLL_TokData_t * tokdata, SESSION * session) } } - rc = handle_all_ep11_cards((ep11_target_t *) & ep11_data->target_list, + rc = handle_all_ep11_cards((ep11_target_t *)ep11_data->target_list, ep11_login_handler, ep11_session); if (rc != CKR_OK) { TRACE_ERROR("%s handle_all_ep11_cards failed: 0x%lx\n", __func__, rc); @@ -7646,8 +7646,7 @@ done: if (ep11_session->flags & (EP11_SESS_PINBLOB_VALID | EP11_VHSM_PINBLOB_VALID)) { rc2 = - handle_all_ep11_cards((ep11_target_t *) & - ep11_data->target_list, + handle_all_ep11_cards((ep11_target_t *)ep11_data->target_list, ep11_logout_handler, ep11_session); if (rc2 != CKR_OK) TRACE_ERROR("%s handle_all_ep11_cards failed: 0x%lx\n", @@ -7700,7 +7699,7 @@ static CK_RV ep11tok_relogin_session(STDLL_TokData_t * tokdata, return CKR_USER_NOT_LOGGED_IN; } - rc = handle_all_ep11_cards((ep11_target_t *) & ep11_data->target_list, + rc = handle_all_ep11_cards((ep11_target_t *)ep11_data->target_list, ep11_login_handler, ep11_session); if (rc != CKR_OK) TRACE_ERROR("%s handle_all_ep11_cards failed: 0x%lx\n", __func__, rc); @@ -7747,7 +7746,7 @@ CK_RV ep11tok_logout_session(STDLL_TokData_t * tokdata, SESSION * session) return CKR_USER_NOT_LOGGED_IN; } - rc = handle_all_ep11_cards((ep11_target_t *) & ep11_data->target_list, + rc = handle_all_ep11_cards((ep11_target_t *)ep11_data->target_list, ep11_logout_handler, ep11_session); if (rc != CKR_OK) TRACE_ERROR("%s handle_all_ep11_cards failed: 0x%lx\n", __func__, rc); -- 2.16.2.windows.1