From e58a9369ca3fb205c46a8b7053bd6e88d7d0fa5d Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Thu, 10 Sep 2020 11:34:50 +0200 Subject: [PATCH] waf: Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14399 Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett (cherry picked from commit 94808cc50e4350a8c3bc250a886e8d4e7802dd12) --- wscript_configure_system_gnutls | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/wscript_configure_system_gnutls b/wscript_configure_system_gnutls index b2b955f3c90..8ae1f04eaf7 100644 --- a/wscript_configure_system_gnutls +++ b/wscript_configure_system_gnutls @@ -26,7 +26,10 @@ conf.CHECK_FUNCS_IN('gnutls_pkcs7_get_embedded_data_oid', 'gnutls') # in 3.6.11, see: # # https://gitlab.com/gnutls/gnutls/-/merge_requests/1085 -if (parse_version('3.6.10') != parse_version(gnutls_version)): +# +# 3.6.10 - 3.6.14 have a severe memory leak with AES-CCM +# https://gitlab.com/gnutls/gnutls/-/merge_requests/1278 +if (parse_version(gnutls_version) > parse_version('3.6.14')): conf.CHECK_FUNCS_IN('gnutls_aead_cipher_encryptv2', 'gnutls') if conf.CHECK_VALUEOF('GNUTLS_CIPHER_AES_128_CFB8', headers='gnutls/gnutls.h'): -- 2.28.0