of SSLv3 and TLS CBC records constant time. Without this, a timing side channel can be used to build a padding oracle and mount Vaudenay's attack. The patch is contributed by Adam Langley <agl@chromium.org>. r=rrelyea,ryan.sleevi. Modified Files: lib/freebl/blapi.h lib/freebl/ldvector.c lib/freebl/loader.c lib/freebl/loader.h lib/freebl/manifest.mn lib/freebl/md5.c lib/freebl/rawhash.c lib/freebl/sha512.c lib/freebl/sha_fast.c lib/freebl/sha_fast.h lib/nss/nss.def lib/pk11wrap/pk11obj.c lib/pk11wrap/pk11pub.h lib/softoken/manifest.mn lib/softoken/pkcs11.c lib/softoken/pkcs11c.c lib/softoken/pkcs11i.h lib/ssl/ssl3con.c lib/util/hasht.h lib/util/pkcs11n.h Added Files: lib/freebl/hmacct.c lib/freebl/hmacct.h lib/softoken/sftkhmac.c git-svn-id: svn://10.0.0.236/trunk@264692 18797224-902f-48f8-a5cc-f745e15eee43
64 lines
1.2 KiB
Plaintext
64 lines
1.2 KiB
Plaintext
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
CORE_DEPTH = ../../..
|
|
|
|
MODULE = nss
|
|
DIRS = legacydb
|
|
|
|
LIBRARY_NAME = softokn
|
|
LIBRARY_VERSION = 3
|
|
MAPFILE = $(OBJDIR)/softokn.def
|
|
|
|
DEFINES += -DSHLIB_SUFFIX=\"$(DLL_SUFFIX)\" -DSHLIB_PREFIX=\"$(DLL_PREFIX)\" -DSOFTOKEN_LIB_NAME=\"$(notdir $(SHARED_LIBRARY))\" -DSHLIB_VERSION=\"$(LIBRARY_VERSION)\"
|
|
|
|
ifdef SQLITE_INCLUDE_DIR
|
|
INCLUDES += -I$(SQLITE_INCLUDE_DIR)
|
|
endif
|
|
|
|
EXPORTS = \
|
|
$(NULL)
|
|
|
|
PRIVATE_EXPORTS = \
|
|
lgglue.h \
|
|
lowkeyi.h \
|
|
lowkeyti.h \
|
|
pkcs11ni.h \
|
|
softoken.h \
|
|
softoknt.h \
|
|
softkver.h \
|
|
sdb.h \
|
|
sftkdbt.h \
|
|
$(NULL)
|
|
|
|
CSRCS = \
|
|
ecdecode.c \
|
|
fipsaudt.c \
|
|
fipstest.c \
|
|
fipstokn.c \
|
|
lgglue.c \
|
|
lowkey.c \
|
|
lowpbe.c \
|
|
padbuf.c \
|
|
pkcs11.c \
|
|
pkcs11c.c \
|
|
pkcs11u.c \
|
|
rsawrapr.c \
|
|
sdb.c \
|
|
sftkdb.c \
|
|
sftkhmac.c \
|
|
sftkpars.c \
|
|
sftkpwd.c \
|
|
softkver.c \
|
|
tlsprf.c \
|
|
jpakesftk.c \
|
|
$(NULL)
|
|
|
|
ifdef SQLITE_UNSAFE_THREADS
|
|
DEFINES += -DSQLITE_UNSAFE_THREADS
|
|
endif
|
|
|
|
# This part of the code, including all sub-dirs, can be optimized for size
|
|
export ALLOW_OPT_CODE_SIZE = 1
|