Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-72376

Use appropriate cast for call to EVP_DigestVerifyFinal on RHEL 7

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 6.3.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None
    • Fully Compatible
    • ALL
    • Security 2022-12-26, Security 2023-01-09
    • 151

      On RHEL 7 (OpenSSL 1.0.x), EVP_DigestVerifyFinal expects its second argument to be of type unsigned char*. On RHEL 8 (OpenSSL 1.1.x), EVPDigestVerifyFinal expects its second argument to be of type const unsigned char*. Today, we are casting the signature to const unsigned char* before passing it to the function here, triggering a compiler error on platforms with older versions of OpenSSL. 

      We should update the cast so it succeeds on older versions of OpenSSL as well.

            Assignee:
            varun.ravichandran@mongodb.com Varun Ravichandran
            Reporter:
            varun.ravichandran@mongodb.com Varun Ravichandran
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: