On Tue, 2026-09-22 at 11:23 +0200, Markus Volk wrote: > gnome-shell logs a libgcrypt warning on the first keyring prompt: > > Libgcrypt warning: missing initialization - please fix the application > > gcr3 initialized libgcrypt from GcrSecretExchange's class_init; gcr 4 > dropped that call, and _gcr_initialize_library() is only reached from > the certificate, parser and importer paths, never from the prompt path. > The guard in that function is inverted on top of it, so even when it is > called the first caller returns without initializing anything. > > The secret exchange itself works either way, but libgcrypt then runs > without the egg secure memory allocators, which puts passwords into > ordinary swappable heap instead of locked pages. > > AI-Generated: Uses Claude Code > Signed-off-by: Markus Volk <[email protected]>
Hi Marcus, Has this issue been reported upstream? I see that the patch is 'Pending', which isn't ideal. Given that this affects security we really should get input from upstream. Best regards, -- Paul Barker
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#246636): https://lists.openembedded.org/g/openembedded-core/message/246636 Mute This Topic: https://lists.openembedded.org/mt/121371713/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
