[openssl-dev] 1.0.2g MacOSX x86_64 build failure (1.0.2f and 1.0.1s are fine)

[Brad House]

On 03/01/2016 02:15 PM, Viktor Dukhovni wrote:
> On Tue, Mar 01, 2016 at 12:50:46PM -0500, Brad House wrote:
> 
>> We have a Mac build system running an older version (10.7), targeting 10.6, which is
>> using this compiler:
>>
>> $ cc --version
>> i686-apple-darwin11-llvm-gcc-4.2 (GCC) 4.2.1 (Based on Apple Inc. build 5658) (LLVM build 2336.1.00)
>>
>>
>> And while building 1.0.2g released today, we found a build regression for x86_64, this
>> regression appears to only impact 1.0.2g (1.0.1s also released today is unaffected,
>> as is the prior 1.0.2f, and 1.0.2g when building 32bit/i386 too is unaffected).
>>
>> The build error is:
>>
>>     cc -I.. -I../.. -I../modes -I../asn1 -I../evp -I../../include  -fPIC -fno-common -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -isysroot /Developer/SDKs/MacOSX10.6.sdk/ -mmacosx-version-min=10.6 -arch x86_64 -O3 -DL_ENDIAN -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT
>> -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -I/usr/local//ssl-fips-2.0.11-x86_64/include -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -c  -o sha1-x86_64.o sha1-x86_64.s
>>     sha1-x86_64.s:1243:missing or invalid immediate expression `0b00011011' taken as 0
>>     sha1-x86_64.s:1243:suffix or operands invalid for `pshufd'
>>     sha1-x86_64.s:1245:missing or invalid immediate expression `0b00011011' taken as 0
>>     sha1-x86_64.s:1245:suffix or operands invalid for `pshufd'
>>     sha1-x86_64.s:1395:missing or invalid immediate expression `0b00011011' taken as 0
>>     sha1-x86_64.s:1395:suffix or operands invalid for `pshufd'
>>     sha1-x86_64.s:1396:missing or invalid immediate expression `0b00011011' taken as 0
>>     sha1-x86_64.s:1396:suffix or operands invalid for `pshufd'
> 
> The only plausible change from 1.0.2f to 1.0.2g that I see that
> might be related to this is below.  Does it work if you revert this
> change (patch -R):
> 
> commit 10c639a8a56c90bec9e332c7ca76ef552b3952ac
> [snip]

Confirmed.  Reverting that commit fixes the build.

-Brad