From: Andreas Schneider Date: Thu, 10 Sep 2020 09:34:50 +0000 (+0200) Subject: waf: Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14 X-Git-Tag: talloc-2.3.2~545 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=94808cc50e4350a8c3bc250a886e8d4e7802dd12;p=thirdparty%2Fsamba.git waf: Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14399 Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett Autobuild-User(master): Andreas Schneider Autobuild-Date(master): Fri Sep 11 08:27:26 UTC 2020 on sn-devel-184 --- diff --git a/wscript_configure_system_gnutls b/wscript_configure_system_gnutls index 9eabd0da75c..2ec217fb9dc 100644 --- a/wscript_configure_system_gnutls +++ b/wscript_configure_system_gnutls @@ -29,7 +29,10 @@ conf.CHECK_FUNCS_IN('gnutls_set_default_priority_append', 'gnutls') # in 3.6.11, see: # # https://gitlab.com/gnutls/gnutls/-/merge_requests/1085 -if (parse_version('3.6.10') != parse_version(gnutls_version)): +# +# 3.6.10 - 3.6.14 have a severe memory leak with AES-CCM +# https://gitlab.com/gnutls/gnutls/-/merge_requests/1278 +if (parse_version(gnutls_version) > parse_version('3.6.14')): conf.CHECK_FUNCS_IN('gnutls_aead_cipher_encryptv2', 'gnutls') # Check if we have support for crypto policies