From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Andy Moreton Newsgroups: gmane.emacs.bugs Subject: bug#22202: 24.5; SECURITY ISSUE -- Emacs Server vulnerable to random number generator attack on Windows systems Date: Wed, 20 Jan 2016 15:15:02 +0000 Message-ID: References: <569BF8F7.3090904@cs.ucla.edu> <83fuxuevs2.fsf@gnu.org> <569D5004.5080701@cs.ucla.edu> <83h9iad26y.fsf@gnu.org> <569DCAD4.30606@cs.ucla.edu> <83y4blbkrj.fsf@gnu.org> <86mvs1fdf9.fsf@gmail.com> <83egdc9w7a.fsf@gnu.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1453302986 19117 80.91.229.3 (20 Jan 2016 15:16:26 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 20 Jan 2016 15:16:26 +0000 (UTC) To: 22202@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Wed Jan 20 16:16:12 2016 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1aLuUV-0005JK-7L for geb-bug-gnu-emacs@m.gmane.org; Wed, 20 Jan 2016 16:16:11 +0100 Original-Received: from localhost ([::1]:43583 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLuUU-00080A-5y for geb-bug-gnu-emacs@m.gmane.org; Wed, 20 Jan 2016 10:16:10 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:44411) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLuUP-0007x9-MA for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:16:06 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aLuUM-0007Xv-Eg for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:16:05 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:38992) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLuUM-0007Xk-BA for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:16:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84) (envelope-from ) id 1aLuUM-00081P-5s for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:16:02 -0500 X-Loop: help-debbugs@gnu.org In-Reply-To: <87h9jg5ay2.fsf@gmail.com> Resent-From: Andy Moreton Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 20 Jan 2016 15:16:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 22202 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Original-Received: via spool by submit@debbugs.gnu.org id=B.145330293430783 (code B ref -1); Wed, 20 Jan 2016 15:16:02 +0000 Original-Received: (at submit) by debbugs.gnu.org; 20 Jan 2016 15:15:34 +0000 Original-Received: from localhost ([127.0.0.1]:55445 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aLuTu-00080Q-JR for submit@debbugs.gnu.org; Wed, 20 Jan 2016 10:15:34 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:53300) by debbugs.gnu.org with esmtp (Exim 4.84) (envelope-from ) id 1aLuTs-00080C-9g for submit@debbugs.gnu.org; Wed, 20 Jan 2016 10:15:33 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aLuTj-0007Po-Qn for submit@debbugs.gnu.org; Wed, 20 Jan 2016 10:15:26 -0500 Original-Received: from lists.gnu.org ([2001:4830:134:3::11]:39505) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLuTj-0007Ph-Nx for submit@debbugs.gnu.org; Wed, 20 Jan 2016 10:15:23 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:44242) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLuTd-0007QR-IS for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:15:23 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aLuTX-0007Ks-TP for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:15:17 -0500 Original-Received: from plane.gmane.org ([80.91.229.3]:47611) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aLuTX-0007KA-Nz for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 10:15:11 -0500 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1aLuTV-0004uJ-Ke for bug-gnu-emacs@gnu.org; Wed, 20 Jan 2016 16:15:09 +0100 Original-Received: from uk.solarflare.com ([193.34.186.16]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 20 Jan 2016 16:15:09 +0100 Original-Received: from andrewjmoreton by uk.solarflare.com with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 20 Jan 2016 16:15:09 +0100 X-Injected-Via-Gmane: http://gmane.org/ Original-Lines: 32 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: uk.solarflare.com User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (windows-nt) Cancel-Lock: sha1:wt+1FfiB3tAXHtrYF3fQ2j7Ex+8= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:111802 Archived-At: On Wed 20 Jan 2016, Eli Zaretskii wrote: >> From: Andy Moreton >> Date: Wed, 20 Jan 2016 14:06:42 +0000 >> >> On Tue 19 Jan 2016, Glenn Morris wrote: >> >> > Andy Moreton wrote: >> > >> >> - broke all builds configured with "--without-gnutls" >> > >> > AFAICS, you are mistaken. >> >> I may well be, but please explain. >> src/sysdep.c (at emacs-25 commit c5ee6de21d4b) contains: >> >> #include "gnutls.h" >> #if 0x020c00 <= GNUTLS_VERSION_NUMBER && !defined WINDOWSNT >> # include >> #else >> # define emacs_gnutls_global_init() Qnil >> # define gnutls_rnd(level, data, len) (-1) >> #endif >> >> How can this build properly on a non-Windows system which does not >> contain an installed "gnutls.h" header ? > > That's src/gnutls.h header that comes with Emacs sources. Thanks - I knew it had to be something obvious. Sorry for the noise. AndyM