Disable TLS signature and finished message checks in fuzzer mode

Also use a const time comparison for the finished message, though
I don't see any real way of exploiting that timing channel.

1 files changed, 8 insertions, 5 deletions

diff --git a/configure.py b/configure.py
index 8aa054c16..d690f4b98 100755
--- a/configure.py
+++ b/configure.py
@@ -278,10 +278,10 @@ def process_command_line(args):
                            help='enable ASan/UBSan checks')
 
     build_group.add_option('--with-coverage', action='store_true', default=False, dest='with_coverage',
-                           help='enable coverage checking and disable opts')
+                           help='add coverage info and disable opts')
 
     build_group.add_option('--with-coverage-info', action='store_true', default=False, dest='with_coverage_info',
-                           help='enable coverage checking')
+                           help='add coverage info')
 
     build_group.add_option('--enable-shared-library', dest='build_shared_lib',
                            action='store_true', default=True,
@@ -383,6 +383,9 @@ def process_command_line(args):
     build_group.add_option('--with-bakefile', action='store_true',
                            default=False, help='Generate bakefile which can be used to create Visual Studio or Xcode project files')
 
+    build_group.add_option('--unsafe-fuzzer-mode', action='store_true', default=False,
+                          help='disable essential checks for testing')
+
     mods_group = optparse.OptionGroup(parser, 'Module selection')
 
     mods_group.add_option('--module-policy', dest='module_policy',
@@ -403,9 +406,6 @@ def process_command_line(args):
     mods_group.add_option('--minimized-build', action='store_true', dest='no_autoload',
                           help='minimize build')
 
-    mods_group.add_option('--unsafe-fuzzer-mode', action='store_true',
-                          help='disable checks for fuzz testing')
-
     # Should be derived from info.txt but this runs too early
     third_party  = ['boost', 'bzip2', 'lzma', 'openssl', 'sqlite3', 'zlib', 'tpm', 'pkcs11']
 
@@ -2337,6 +2337,9 @@ def main(argv = None):
         build_config.version_release_type,
         release_date(build_config.version_datestamp)))
 
+    if options.unsafe_fuzzer_mode:
+        logging.warning("The fuzzer mode flag is labeled unsafe for a reason, this version is for testing only")
+
 if __name__ == '__main__':
     try:
         main()