codechecker
codechecker copied to clipboard
Add FIPS support to CodeChecker
CodeChecker uses hashlib md5() in several areas. This causes problems on FIPS enabled systems, since MD5 is not supported in that mode.
The hashlib md5() signature was updated to include a workaround in Python 3.9. Implementing this workaround in CodeChecker should allow it to function on FIPS systems.
If changing how md5() is called is not feasible, then it may also be possible to use sha256(), which is FIPS compliant.
We are using CodeChecker for our CD/CI, which is transitioning to a FIPS platform. This will become a blocker for that process.
Update: Simply replacing 'md5' with 'sha256' seems to work, but I don't know if there are any unintended side effects.