]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Remove the RAND_get0_public() from fips provider initialization
authorTomas Mraz <tomas@openssl.org>
Thu, 11 Mar 2021 19:04:06 +0000 (20:04 +0100)
committerTomas Mraz <tomas@openssl.org>
Fri, 12 Mar 2021 14:13:00 +0000 (15:13 +0100)
It is not needed anymore and it causes leaks because
it is called when the FIPS provider libctx is not yet
properly set up.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14497)

providers/fips/fipsprov.c

index 90491b0e5f7ffe897b4c34e2f1789a1700378645..70826181e532a11f64cbdec4b80bed19fbcfdb53 100644 (file)
@@ -632,9 +632,6 @@ int OSSL_provider_init(const OSSL_CORE_HANDLE *handle,
         goto err;
     }
 
-    /* TODO(3.0): Tests will hang if this is removed */
-    (void)RAND_get0_public(libctx);
-
     *out = fips_dispatch_table;
     return 1;
  err: