Re: [update] security/polarssl 2.16.3

On Thu 19/09/2019 20:34, Björn Ketelaars wrote:
> Mbed TLS 2.16.3 is a maintenance release of the Mbed TLS 2.16 branch,
> and provides bug fixes and minor enhancements. Overview of changes can
> be found at
> https://github.com/ARMmbed/mbedtls/releases/tag/mbedtls-2.16.3.
>
> Major of mbedx509 has been bumped as check_sym found changes in data
> object sizes. Minor of mbedcrypto has been bumped as symbols have been
> added.
>
> 'make test' runs successfully on amd64. Build tested all consumers, and
> run tested with net/openvpn,mbedtls.
>
> OK?

Ping.


diff --git Makefile Makefile
index 6688890c02a..143997113df 100644
--- Makefile
+++ Makefile
@@ -4,13 +4,13 @@ PORTROACH= limit:^2\.16

COMMENT= SSL library with an intuitive API and readable source code

-DISTNAME= mbedtls-2.16.2
+DISTNAME= mbedtls-2.16.3
EXTRACT_SUFX= -gpl.tgz

# check SOVERSION
SHARED_LIBS += mbedtls 6.1 # 12
-SHARED_LIBS += mbedcrypto 4.2 # 3
-SHARED_LIBS += mbedx509 3.1 # 0
+SHARED_LIBS += mbedcrypto 4.3 # 3
+SHARED_LIBS += mbedx509 4.0 # 0

CATEGORIES= security

diff --git distinfo distinfo
index ec8ec6d9861..d8a902b3eb9 100644
--- distinfo
+++ distinfo
@@ -1,2 +1,2 @@
-SHA256 (mbedtls-2.16.2-gpl.tgz) = QNGJZd02zgFYorA3yMVEAbrVT2g/QxFQJRjuGhoLYiw=
-SIZE (mbedtls-2.16.2-gpl.tgz) = 2561449
+SHA256 (mbedtls-2.16.3-gpl.tgz) = /QH+SyiRFt93gdBeHvcStsmII8UzT0onQE8TqNBm72o=
+SIZE (mbedtls-2.16.3-gpl.tgz) = 2560598
diff --git patches/patch-include_mbedtls_config_h patches/patch-include_mbedtls_config_h
index d3341e52029..6ab437fd3aa 100644
--- patches/patch-include_mbedtls_config_h
+++ patches/patch-include_mbedtls_config_h
@@ -6,7 +6,7 @@ www/hiawatha.
Index: include/mbedtls/config.h
--- include/mbedtls/config.h.orig
+++ include/mbedtls/config.h
-@@ -1644,7 +1644,7 @@
+@@ -1678,7 +1678,7 @@
*
* Uncomment this to enable pthread mutexes.
*/
@@ -15,7 +15,7 @@ Index: include/mbedtls/config.h

/**
* \def MBEDTLS_VERSION_FEATURES
-@@ -2836,7 +2836,7 @@
+@@ -2870,7 +2870,7 @@
*
* Enable this layer to allow use of mutexes within mbed TLS
*/
diff --git patches/patch-tests_suites_host_test_function patches/patch-tests_suites_host_test_function
index 20abcc0633d..d247ff05d8d 100644
--- patches/patch-tests_suites_host_test_function
+++ patches/patch-tests_suites_host_test_function
@@ -15,8 +15,8 @@ Index: tests/suites/host_test.function

#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) && \
!defined(TEST_SUITE_MEMORY_BUFFER_ALLOC)
-@@ -548,20 +545,6 @@ int execute_tests( int argc , const char ** argv )
- test_info.failed = 0;
+@@ -549,20 +546,6 @@ int execute_tests( int argc , const char ** argv )
+ test_info.result = TEST_RESULT_SUCCESS;
test_info.paramfail_test_state = PARAMFAIL_TESTSTATE_IDLE;

-#if defined(__unix__) || (defined(__APPLE__) && defined(__MACH__))
@@ -36,7 +36,7 @@ Index: tests/suites/host_test.function

function_id = strtol( params[0], NULL, 10 );
if ( (ret = check_test( function_id )) == DISPATCH_TEST_SUCCESS )
-@@ -573,13 +556,6 @@ int execute_tests( int argc , const char ** argv )
+@@ -574,13 +557,6 @@ int execute_tests( int argc , const char ** argv )
}
}

@@ -50,7 +50,7 @@ Index: tests/suites/host_test.function

}

-@@ -663,10 +639,6 @@ int execute_tests( int argc , const char ** argv )
+@@ -669,10 +645,6 @@ int execute_tests( int argc , const char ** argv )
mbedtls_memory_buffer_alloc_free();