Merge pull request #27104 from tiran/genapi-fips-md5

mattip · web-flow · commit cf2d77a713ae · 2024-08-04T11:39:11.000+03:00
Fix building NumPy in FIPS mode
diff --git a/numpy/_core/code_generators/genapi.py b/numpy/_core/code_generators/genapi.py
@@ -160,7 +160,7 @@ def __str__(self):
         return '%s%s %s(%s)' % (doccomment, self.return_type, self.name, argstr)
 
     def api_hash(self):
-        m = hashlib.md5()
+        m = hashlib.md5(usedforsecurity=False)
         m.update(remove_whitespace(self.return_type))
         m.update('\000')
         m.update(self.name)
@@ -533,7 +533,9 @@ def fullapi_hash(api_dicts):
             a.extend(name)
             a.extend(','.join(map(str, data)))
 
-    return hashlib.md5(''.join(a).encode('ascii')).hexdigest()
+    return hashlib.md5(
+        ''.join(a).encode('ascii'), usedforsecurity=False
+    ).hexdigest()
 
 # To parse strings like 'hex = checksum' where hex is e.g. 0x1234567F and
 # checksum a 128 bits md5 checksum (hex format as well)
@@ -555,7 +557,7 @@ def main():
     tagname = sys.argv[1]
     order_file = sys.argv[2]
     functions = get_api_functions(tagname, order_file)
-    m = hashlib.md5(tagname)
+    m = hashlib.md5(tagname, usedforsecurity=False)
     for func in functions:
         print(func)
         ah = func.api_hash()
