diff options
author | Richard Levitte <levitte@openssl.org> | 2022-05-04 09:15:29 +0200 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2022-05-05 15:06:12 +0200 |
commit | 32e3c071373280b69be02ba91fc3204495e2e1bf (patch) | |
tree | 2d2c6b36aec2a7bb3073cd1de29e72a9b78490ab /crypto/provider_core.c | |
parent | 4da7663b02bf05542830e85db6f74cf90daf1f49 (diff) |
Add method store cache flush and method removal to non-EVP operations
evp_method_store_flush() and evp_method_store_remove_all_provided()
only cover EVP operations, but not encoders, decoders and store loaders.
This adds corresponding methods for those as well. Without this, their
method stores are never cleaned up when the corresponding providers are
deactivated or otherwise modified.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18151)
Diffstat (limited to 'crypto/provider_core.c')
-rw-r--r-- | crypto/provider_core.c | 39 |
1 files changed, 36 insertions, 3 deletions
diff --git a/crypto/provider_core.c b/crypto/provider_core.c index 8e7ed6265e..3e2738fb32 100644 --- a/crypto/provider_core.c +++ b/crypto/provider_core.c @@ -15,7 +15,10 @@ #include <openssl/params.h> #include <openssl/opensslv.h> #include "crypto/cryptlib.h" +#include "crypto/decoder.h" /* ossl_decoder_store_cache_flush */ +#include "crypto/encoder.h" /* ossl_encoder_store_cache_flush */ #include "crypto/evp.h" /* evp_method_store_cache_flush */ +#include "crypto/store.h" /* ossl_store_loader_store_cache_flush */ #include "crypto/rand.h" #include "internal/nelem.h" #include "internal/thread_once.h" @@ -1151,8 +1154,22 @@ static int provider_flush_store_cache(const OSSL_PROVIDER *prov) freeing = store->freeing; CRYPTO_THREAD_unlock(store->lock); - if (!freeing) - return evp_method_store_cache_flush(prov->libctx); + if (!freeing) { + int acc + = evp_method_store_cache_flush(prov->libctx) +#ifndef FIPS_MODULE + + ossl_encoder_store_cache_flush(prov->libctx) + + ossl_decoder_store_cache_flush(prov->libctx) + + ossl_store_loader_store_cache_flush(prov->libctx) +#endif + ; + +#ifndef FIPS_MODULE + return acc == 4; +#else + return acc == 1; +#endif + } return 1; } @@ -1170,12 +1187,28 @@ static int provider_remove_store_methods(OSSL_PROVIDER *prov) CRYPTO_THREAD_unlock(store->lock); if (!freeing) { + int acc; + + if (!CRYPTO_THREAD_read_lock(prov->opbits_lock)) + return 0; OPENSSL_free(prov->operation_bits); prov->operation_bits = NULL; prov->operation_bits_sz = 0; CRYPTO_THREAD_unlock(prov->opbits_lock); - return evp_method_store_remove_all_provided(prov); + acc = evp_method_store_remove_all_provided(prov) +#ifndef FIPS_MODULE + + ossl_encoder_store_remove_all_provided(prov) + + ossl_decoder_store_remove_all_provided(prov) + + ossl_store_loader_store_remove_all_provided(prov) +#endif + ; + +#ifndef FIPS_MODULE + return acc == 4; +#else + return acc == 1; +#endif } return 1; } |