From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#22202: 24.5; SECURITY ISSUE -- Emacs Server vulnerable to random number generator attack on Windows systems Date: Wed, 20 Jan 2016 16:12:09 +0200 Message-ID: <83egdc9w7a.fsf@gnu.org> References: <569BF8F7.3090904@cs.ucla.edu> <83fuxuevs2.fsf@gnu.org> <569D5004.5080701@cs.ucla.edu> <83h9iad26y.fsf@gnu.org> <569DCAD4.30606@cs.ucla.edu> <83y4blbkrj.fsf@gnu.org> <86mvs1fdf9.fsf@gmail.com> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1453299201 17444 80.91.229.3 (20 Jan 2016 14:13:21 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 20 Jan 2016 14:13:21 +0000 (UTC) Cc: 22202@debbugs.gnu.org To: Andy Moreton Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Wed Jan 20 15:13:11 2016 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1aLtVW-0004Z2-A5 for geb-bug-gnu-emacs@m.gmane.org; Wed, 20 Jan 2016 15:13:10 +0100 Original-Received: from localhost ([::1]:43322 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLtVV-0003mr-K9 for geb-bug-gnu-emacs@m.gmane.org; Wed, 20 Jan 2016 09:13:09 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:57396) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLtVR-0003mT-Tu for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 09:13:06 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aLtVO-0000cL-On for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 09:13:05 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:38067) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLtVO-0000cG-LV for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 09:13:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84) (envelope-from ) id 1aLtVO-0006Fc-G4 for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 09:13:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 20 Jan 2016 14:13:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 22202 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 22202-submit@debbugs.gnu.org id=B22202.145329913023964 (code B ref 22202); Wed, 20 Jan 2016 14:13:02 +0000 Original-Received: (at 22202) by debbugs.gnu.org; 20 Jan 2016 14:12:10 +0000 Original-Received: from localhost ([127.0.0.1]:54520 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aLtUY-0006ER-Fs for submit@debbugs.gnu.org; Wed, 20 Jan 2016 09:12:10 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:37507) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aLtUW-0006EC-Ri for 22202@debbugs.gnu.org; Wed, 20 Jan 2016 09:12:09 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aLtUL-0000DW-VZ for 22202@debbugs.gnu.org; Wed, 20 Jan 2016 09:12:03 -0500 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:54015) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLtUL-0000DO-Si; Wed, 20 Jan 2016 09:11:57 -0500 Original-Received: from 84.94.185.246.cable.012.net.il ([84.94.185.246]:3535 helo=HOME-C4E4A596F7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1aLtUL-0000uj-9Z; Wed, 20 Jan 2016 09:11:57 -0500 In-reply-to: (message from Andy Moreton on Wed, 20 Jan 2016 14:06:42 +0000) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:111800 Archived-At: > From: Andy Moreton > Date: Wed, 20 Jan 2016 14:06:42 +0000 > > On Tue 19 Jan 2016, Glenn Morris wrote: > > > Andy Moreton wrote: > > > >> - broke all builds configured with "--without-gnutls" > > > > AFAICS, you are mistaken. > > I may well be, but please explain. > src/sysdep.c (at emacs-25 commit c5ee6de21d4b) contains: > > #include "gnutls.h" > #if 0x020c00 <= GNUTLS_VERSION_NUMBER && !defined WINDOWSNT > # include > #else > # define emacs_gnutls_global_init() Qnil > # define gnutls_rnd(level, data, len) (-1) > #endif > > How can this build properly on a non-Windows system which does not > contain an installed "gnutls.h" header ? That's src/gnutls.h header that comes with Emacs sources.