openssl/openssl

fips.so builds and links many unreachable ffc params

Open

#25.747 aberto em 19 de out. de 2024

Ver no GitHub
 (0 comments) (0 reactions) (0 assignees)C (11.262 forks)batch import
help wantedtriaged: refactor

Métricas do repositório

Stars
 (30.157 stars)
Métricas de merge de PR
 (Nenhuma PRs mesclada em 30d)

Description

$ readelf -aW ./providers/fips.so | grep FIPS186
  4418: 00000000000e9c90   125 FUNC    LOCAL  DEFAULT   14 ossl_ffc_params_FIPS186_2_generate
  5170: 00000000000e9c39    87 FUNC    LOCAL  DEFAULT   14 ossl_ffc_params_FIPS186_4_generate
  5248: 00000000000e91b6  2691 FUNC    LOCAL  DEFAULT   14 ossl_ffc_params_FIPS186_2_gen_verify
  5284: 00000000000e9de6   165 FUNC    LOCAL  DEFAULT   14 ossl_ffc_params_FIPS186_4_validate
  5449: 00000000000e85a2  3092 FUNC    LOCAL  DEFAULT   14 ossl_ffc_params_FIPS186_4_gen_verify
  6700: 00000000000e9e8b   175 FUNC    LOCAL  DEFAULT   14 ossl_ffc_params_FIPS186_2_validate

crypto/ffc/build.info currently builds all functions into the fips.so provider, even though many of these are unused.

These can be optimized out.

Guia do colaborador