]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
leak-detective: Whitelist additional OpenSSL 3 functions
authorTobias Brunner <tobias@strongswan.org>
Thu, 1 Dec 2022 08:40:21 +0000 (09:40 +0100)
committerTobias Brunner <tobias@strongswan.org>
Fri, 2 Dec 2022 13:58:23 +0000 (14:58 +0100)
These are necessary when building against the OpenSSL 3 version shipped
with Ubuntu (the first is only seen when built with --enable-bfd-backtraces).

src/libstrongswan/utils/leak_detective.c

index 20e280728b3eeac4d9ad2638c95cf29f4aecae46..2eb2f8e0adb7153f3661f99cac77a24bb98ea8b5 100644 (file)
@@ -599,6 +599,7 @@ static char *whitelist[] = {
        "RAND_DRBG_get0_private",
        "RAND_DRBG_get0_public",
        /* OpenSSL 3.0 caches even more static stuff */
+       "evp_generic_fetch_from_prov",
        "ERR_set_debug",
        "ERR_set_error",
        "EVP_DigestSignInit",
@@ -611,6 +612,7 @@ static char *whitelist[] = {
        "EVP_CIPHER_fetch",
        "EVP_KDF_fetch",
        "EVP_KEYEXCH_fetch",
+       "EVP_KEYMGMT_do_all_provided",
        "EVP_KEYMGMT_fetch",
        "EVP_MAC_fetch",
        "EVP_MD_fetch",