Attachment 317481 Details for Bug 463437 – proposed patch

[patch] proposed patch

nss_compat.diff (text/plain), 2.41 KB, created by Rob Crittenden on 2008-09-23 14:36:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rob Crittenden

Created: 2008-09-23 14:36:34 UTC

Size: 2.41 KB

patch

obsolete

>Index: src/ssl.c
>===================================================================
>--- src/ssl.c	(revision 60)
>+++ src/ssl.c	(working copy)
>@@ -19,7 +19,7 @@
> #include <unistd.h>
> #include <stdio.h>
> #include "nss_compat_ossl.h"
>-#include <nss3/secder.h>
>+#include <secder.h>
> #include <secmod.h>
> #include <termios.h> /* for echo on/off */
> #include <sys/stat.h>
>@@ -1203,6 +1203,11 @@
> /*
>  * Is it better do to the NSS_Init() here or let the user pass in the
>  * database location via the command-line?
>+ *
>+ * The SSL_library_init() man page actually advocates ignoring the return
>+ * value. There isn't much we can do about this if the NSS_Init() fails.
>+ * 
>+ * The error will appear elsewhere.
>  */
> int SSL_library_init(void)
> {
>@@ -1224,19 +1229,18 @@
>         certDir = "/etc/pki/nssdb";
>     }
> 
>-    /* FIXME: should we really exit or just let things continue? */
>     if (certDir) {
>         if (NSS_Init(certDir) != SECSuccess) {
>-            exit(1);
>+            return 1;
>         }
>     } else {
>         if (NSS_NoDB_Init(NULL) != SECSuccess) {
>-            exit(1);
>+            return 1;
>         }
>     }
>  
>     if (nss_Init_Tokens() != SECSuccess) {
>-        exit(1);
>+        return 1;
>     }
> 
>     status = NSS_SetDomesticPolicy();
>Index: src/rand.c
>===================================================================
>--- src/rand.c	(revision 59)
>+++ src/rand.c	(working copy)
>@@ -64,6 +64,8 @@
>             else
>                 toread = 1024;
>             numread = fread(buf, 1, toread, fp);
>+            if (numread <= 0)
>+                break;
>             PK11_RandomUpdate(buf, numread);
>             totalread += numread;
>         }
>@@ -84,9 +86,12 @@
>     FILE *fp;
> 
>     if ((fp = fopen(file, "wb")) != NULL) {
>+        chmod(file, 0600);
> 	if (PK11_GenerateRandom(buf, sizeof (buf)) == SECSuccess) {
> 	    total = sizeof (buf);
>             numwrite = fwrite(buf, 1, total, fp);
>+            if (numwrite <= 0)
>+                total = 0;
> 	}
> 	fclose(fp);
>     }
>Index: src/nss_compat_ossl.h
>===================================================================
>--- src/nss_compat_ossl.h	(revision 60)
>+++ src/nss_compat_ossl.h	(working copy)
>@@ -22,11 +22,11 @@
> #undef HAVE_OPENSSL
> #undef HAVE_OSSL_ENGINE_H
> 
>-#include <nspr4/nspr.h>
>+#include <nspr.h>
> #include <nss.h>
> #include <pk11pub.h>
> #include <sechash.h>
>-#include <nss3/ssl.h>
>+#include <ssl.h>
> #include <base64.h>
> #include <keyhi.h>
> #include <sslproto.h>

Actions: View | Diff

Attachments on bug 463437: 317481 | 318105