HomeFreeBSD

MFH: r541739

Description

MFH: r541739

databases/mysql57-client: fix SIGSEGV due to static OpenSSL linking

As opposed to MySQL 8.0.x branch that switched to dynamic linking for OpenSSL libraries, MySQL 5.7.30 still statically links client applications with OpenSSL.

Meantime, OpenSSL supports dynamic loading of external engines like security/gost-engine. If such engine is configured to load in the openssl.cnf, mysql CLI application crashes at start with SIGSEGV early trying to initialize OpenSSL.

This loads dynamic engine library libgost.so that calls OpenSSL function using second (uninitialized) instance of OpenSSL leading to crash.

The problem is fixed with small backport from MySQL 8.0.x for cmake/ssl.cmake distribution file we already patching anyway.

https://github.com/openssl/openssl/issues/12368

PR: 247803
Reported by: eugen
Sponsored by: Netzkommune GmbH

Approved by: ports-secteam (with hat)

Details

Provenance
joneumAuthored on
Parents
rP541825: MFH: r541824
Branches
Unknown
Tags
Unknown