From 3eb5b030133a2bce5cc6911d3a507491d183afbd Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Thu, 10 Sep 2020 11:34:50 +0200 Subject: [PATCH] waf: Only use gnutls_aead_cipher_encryptv2() for GnuTLS > 3.6.14 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14399 Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett (cherry picked from commit 94808cc50e4350a8c3bc250a886e8d4e7802dd12) --- wscript_configure_system_gnutls | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/wscript_configure_system_gnutls b/wscript_configure_system_gnutls index 9eabd0da75c..2ec217fb9dc 100644 --- a/wscript_configure_system_gnutls +++ b/wscript_configure_system_gnutls @@ -29,7 +29,10 @@ conf.CHECK_FUNCS_IN('gnutls_set_default_priority_append', 'gnutls') # in 3.6.11, see: # # https://gitlab.com/gnutls/gnutls/-/merge_requests/1085 -if (parse_version('3.6.10') != parse_version(gnutls_version)): +# +# 3.6.10 - 3.6.14 have a severe memory leak with AES-CCM +# https://gitlab.com/gnutls/gnutls/-/merge_requests/1278 +if (parse_version(gnutls_version) > parse_version('3.6.14')): conf.CHECK_FUNCS_IN('gnutls_aead_cipher_encryptv2', 'gnutls') # Check if we have support for crypto policies -- 2.28.0