Khem Raj 7620bc6822 mariadb: fix AES CBC/CTR/GCM with OpenSSL 4.0
The aes and mf_iocache unit tests (mariadb-ptest) fail with OpenSSL 4.0
for every AES mode that uses an IV, while ECB keeps working.

MyCTX in mysys_ssl/my_crypt.cc keeps the EVP_CIPHER_CTX in a stack
buffer and initializes it with memset() + EVP_CIPHER_CTX_reset().
OpenSSL 3.x reset() ended in its legacy path with ctx->iv_len = -1, but
OpenSSL 4.0 removed that path and returns early when no cipher is set,
leaving iv_len at 0. EVP_CipherInit_ex() then hands IV length 0 to the
provider, which fails with "ossl_cipher_generic_initiv: invalid iv
length", so AES_ENCRYPT(), encrypted temporary files etc. break.

Backport the proposed upstream fix, which allocates the context with
EVP_CIPHER_CTX_new()/EVP_CIPHER_CTX_free() and drops the stack buffer
hack together with check_openssl_compatibility().

Upstream: https://jira.mariadb.org/browse/MDEV-40287
          https://github.com/MariaDB/server/pull/5652

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-09-12 16:52:17 -07:00
2026-06-23 00:45:59 -07:00
2025-04-10 08:31:06 -07:00
2026-03-02 19:25:48 -08:00

Collection of layers for the OE-core universe

Main layer maintainer: Khem Raj raj.khem@gmail.com

This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme
127 MiB
Languages
BitBake 85.1%
Shell 5.6%
NASL 3.4%
C 2.6%
Roff 1.8%
Other 1.3%