codechecker icon indicating copy to clipboard operation
codechecker copied to clipboard

Add FIPS support to CodeChecker

Open GunMetalBull305 opened this issue 6 months ago • 3 comments

CodeChecker uses hashlib md5() in several areas. This causes problems on FIPS enabled systems, since MD5 is not supported in that mode.

The hashlib md5() signature was updated to include a workaround in Python 3.9. Implementing this workaround in CodeChecker should allow it to function on FIPS systems.

If changing how md5() is called is not feasible, then it may also be possible to use sha256(), which is FIPS compliant.

We are using CodeChecker for our CD/CI, which is transitioning to a FIPS platform. This will become a blocker for that process.

Update: Simply replacing 'md5' with 'sha256' seems to work, but I don't know if there are any unintended side effects.

GunMetalBull305 avatar Aug 02 '24 15:08 GunMetalBull305