Ryan Tandy authored 5 years ago and Quanah Gibson-Mount committed 5 years ago

Since GnuTLS moved to implicit initialization on library load, calling
this function deinitializes GnuTLS and then re-initializes it.

When GnuTLS uses /dev/urandom as an entropy source (getrandom() not
available, or older versions of GnuTLS), and the application closed all
file descriptors at startup, this could result in GnuTLS opening
/dev/urandom over one of the application's file descriptors when
re-initialized.

Additionally, the custom mutex functions are never reset, so if libldap
is unloaded (for example via dlclose()) after calling this, its code may
be unmapped and the application could crash when GnuTLS calls the mutex
functions.

On typical systems, GnuTLS system mutexes are probably the same as what
libldap uses anyway.

Adjust patch for ITS#7585 as Windows does not have LDAPI support.

This reverts commit 6f623dfa.

This reverts commit 653922c5.

This reverts commit e224920e.

This reverts commit 33945aeb.

Depends on custom glibc from RedHat

Howard Chu authored 5 years ago and Quanah Gibson-Mount committed 5 years ago

Don't search for scopes of entries with no children