Daan De Meyer
d158595dc7
Each dlopen_*() wrapper kept its dl handle as a file-scope 'static void *xxx_dl = NULL;' even though only the wrapper itself ever referenced it. Move each one inside the corresponding function so its scope matches its actual use, leaving the rest of each translation unit free of the unused file-scope name. In pcre2-util.c the assert(pcre2_dl) in pattern_matches_and_log() becomes assert(sym_pcre2_match), which carries the same invariant (pattern_compile_and_log() ran dlopen_pcre2()).
123 lines
4.3 KiB
C
123 lines
4.3 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
|
|
#include <sys/syslog.h>
|
|
|
|
#include "sd-dlopen.h"
|
|
|
|
#include "gcrypt-util.h"
|
|
#include "log.h" /* IWYU pragma: keep */
|
|
|
|
#if HAVE_GCRYPT
|
|
|
|
static DLSYM_PROTOTYPE(gcry_control) = NULL;
|
|
static DLSYM_PROTOTYPE(gcry_check_version) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_close) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_copy) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_ctl) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_get_algo_dlen) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_open) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_read) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_reset) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_setkey) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_md_write) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_add) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_add_ui) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_cmp) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_cmp_ui) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_get_nbits) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_invm) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_mod) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_mul) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_mulm) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_new) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_powm) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_print) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_release) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_scan) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_set_ui) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_sub) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_subm) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_mpi_sub_ui) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_prime_check) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_randomize) = NULL;
|
|
DLSYM_PROTOTYPE(gcry_strerror) = NULL;
|
|
#endif
|
|
|
|
int dlopen_gcrypt(int log_level) {
|
|
#if HAVE_GCRYPT
|
|
static void *gcrypt_dl = NULL;
|
|
|
|
SD_ELF_NOTE_DLOPEN(
|
|
"gcrypt",
|
|
"Support for journald forward-sealing",
|
|
SD_ELF_NOTE_DLOPEN_PRIORITY_SUGGESTED,
|
|
"libgcrypt.so.20");
|
|
|
|
return dlopen_many_sym_or_warn(
|
|
&gcrypt_dl,
|
|
"libgcrypt.so.20", log_level,
|
|
DLSYM_ARG(gcry_control),
|
|
DLSYM_ARG(gcry_check_version),
|
|
DLSYM_ARG(gcry_md_close),
|
|
DLSYM_ARG(gcry_md_copy),
|
|
DLSYM_ARG(gcry_md_ctl),
|
|
DLSYM_ARG(gcry_md_get_algo_dlen),
|
|
DLSYM_ARG(gcry_md_open),
|
|
DLSYM_ARG(gcry_md_read),
|
|
DLSYM_ARG(gcry_md_reset),
|
|
DLSYM_ARG(gcry_md_setkey),
|
|
DLSYM_ARG(gcry_md_write),
|
|
DLSYM_ARG(gcry_mpi_add),
|
|
DLSYM_ARG(gcry_mpi_add_ui),
|
|
DLSYM_ARG(gcry_mpi_cmp),
|
|
DLSYM_ARG(gcry_mpi_cmp_ui),
|
|
DLSYM_ARG(gcry_mpi_get_nbits),
|
|
DLSYM_ARG(gcry_mpi_invm),
|
|
DLSYM_ARG(gcry_mpi_mod),
|
|
DLSYM_ARG(gcry_mpi_mul),
|
|
DLSYM_ARG(gcry_mpi_mulm),
|
|
DLSYM_ARG(gcry_mpi_new),
|
|
DLSYM_ARG(gcry_mpi_powm),
|
|
DLSYM_ARG(gcry_mpi_print),
|
|
DLSYM_ARG(gcry_mpi_release),
|
|
DLSYM_ARG(gcry_mpi_scan),
|
|
DLSYM_ARG(gcry_mpi_set_ui),
|
|
DLSYM_ARG(gcry_mpi_sub),
|
|
DLSYM_ARG(gcry_mpi_subm),
|
|
DLSYM_ARG(gcry_mpi_sub_ui),
|
|
DLSYM_ARG(gcry_prime_check),
|
|
DLSYM_ARG(gcry_randomize),
|
|
DLSYM_ARG(gcry_strerror));
|
|
#else
|
|
return log_full_errno(log_level, SYNTHETIC_ERRNO(EOPNOTSUPP),
|
|
"gcrypt support is not compiled in.");
|
|
#endif
|
|
}
|
|
|
|
int initialize_libgcrypt(bool secmem) {
|
|
#if HAVE_GCRYPT
|
|
int r;
|
|
|
|
r = dlopen_gcrypt(LOG_DEBUG);
|
|
if (r < 0)
|
|
return r;
|
|
|
|
if (sym_gcry_control(GCRYCTL_INITIALIZATION_FINISHED_P))
|
|
return 0;
|
|
|
|
sym_gcry_control(GCRYCTL_SET_PREFERRED_RNG_TYPE, GCRY_RNG_TYPE_SYSTEM);
|
|
assert_se(sym_gcry_check_version("1.4.5"));
|
|
|
|
/* Turn off "secmem". Clients which wish to make use of this
|
|
* feature should initialize the library manually */
|
|
if (!secmem)
|
|
sym_gcry_control(GCRYCTL_DISABLE_SECMEM);
|
|
|
|
sym_gcry_control(GCRYCTL_INITIALIZATION_FINISHED, 0);
|
|
|
|
return 0;
|
|
#else
|
|
return -EOPNOTSUPP;
|
|
#endif
|
|
}
|