python3: add the sm3 method for obtaining the salt value

This commit is contained in:
hanxinke 2021-10-29 23:19:21 -04:00
parent 261bcb8731
commit 13ff6b4821
2 changed files with 43 additions and 1 deletions

View File

@ -0,0 +1,34 @@
From 1e245b53ec5ae96ca6ad11edd72b812f9ae0d141 Mon Sep 17 00:00:00 2001
From: hanxinke <hanxinke@huawei.com>
Date: Tue, 3 Aug 2021 09:34:30 +0800
Subject: [PATCH] add the sm3 method for obtaining the salt value
Signed-off-by: hanxinke <hanxinke@huawei.com>
---
Lib/crypt.py | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/Lib/crypt.py b/Lib/crypt.py
index 8846602..4c62280 100644
--- a/Lib/crypt.py
+++ b/Lib/crypt.py
@@ -54,7 +54,7 @@ def mksalt(method=None, *, rounds=None):
if not 4 <= log_rounds <= 31:
raise ValueError('rounds out of the range 2**4 to 2**31')
s += f'{log_rounds:02d}$'
- elif method.ident in ('5', '6'): # SHA-2
+ elif method.ident in ('5', '6', 'sm3'): # SHA-2 and sm3
if rounds is not None:
if not 1000 <= rounds <= 999_999_999:
raise ValueError('rounds out of the range 1000 to 999_999_999')
@@ -109,4 +109,7 @@ for _v in 'b', 'y', 'a', '':
_add_method('MD5', '1', 8, 34)
_add_method('CRYPT', None, 2, 13)
+# support the sm3 method
+_add_method('SM3', 'sm3', 16, 63)
+
del _v, _add_method
--
2.23.0

View File

@ -3,7 +3,7 @@ Summary: Interpreter of the Python3 programming language
URL: https://www.python.org/
Version: 3.7.9
Release: 17
Release: 18
License: Python
%global branchversion 3.7
@ -154,6 +154,7 @@ Patch6044: backport-CVE-2021-3737.patch
Patch6045: backport-bpo-44022-Improve-the-regression-test.patch
patch9000: Don-t-override-PYTHONPATH-which-is-already-set.patch
patch9001: add-the-sm3-method-for-obtaining-the-salt-value.patch
Recommends: %{name}-help = %{version}-%{release}
Provides: python%{branchversion} = %{version}-%{release}
@ -292,6 +293,7 @@ rm Lib/ensurepip/_bundled/*.whl
%patch6044 -p1
%patch6045 -p1
%patch9000 -p1
%patch9001 -p1
sed -i "s/generic_os/%{_vendor}/g" Lib/platform.py
rm configure pyconfig.h.in
@ -893,6 +895,12 @@ export BEP_GTDLIST="$BEP_GTDLIST_TMP"
%{_mandir}/*/*
%changelog
* Sat Oct 30 2021 hanxinke<hanxinke@huawei.com> - 3.7.9-18
- Type:requirement
- CVE:NA
- SUG:NA
- DESC:add the sm3 method for obtaining the salt value
* Fri Sep 24 2021 shixuantong<shixuantong@huawei.com> - 3.7.9-17
- Type:CVE
- CVE:CVE-2021-3733 CVE-2021-3737