1 --- rpm-5.4.10.orig/lib/verify.c 2012-07-06 17:39:16.000000000 +0200
2 +++ rpm-5.4.10/lib/verify.c 2012-10-21 19:35:08.610708732 +0200
4 unsigned char * fdigest = (unsigned char *)
5 memset(alloca(vf->dlen), 0, vf->dlen);
7 +#if defined(RPM_VENDOR_PLD)
9 + * Disable hmac during digest calculation, since rpm package files contain plain md5sums,
10 + * hmac support is useless, see:
11 + * http://lists.pld-linux.org/mailman/pipermail/pld-devel-en/2012-October/023193.html
13 + int rc = dodigest(vf->dalgo, vf->fn, fdigest, 0, &fsize);
15 #define _mask (RPMVERIFY_FDIGEST|RPMVERIFY_HMAC)
16 unsigned dflags = (vf->vflags & _mask) == RPMVERIFY_HMAC
19 int rc = dodigest(vf->dalgo, vf->fn, fdigest, dflags, &fsize);
23 VF_SET(res, READFAIL);