Still FAILED build of OpenSSL branch master with options -d enable-fuzz-afl no-shared no-module

Tue Nov 3 21:37:00 UTC 2020

Platform and configuration command:

$ uname -a
Linux run 4.15.0-122-generic #124-Ubuntu SMP Thu Oct 15 13:03:05 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
$ CC=afl-clang-fast ../openssl/config -d enable-fuzz-afl no-shared no-module

Commit log since last time:

e7a8fecd0b Add more diagnostics to ossl_shim
467dc32524 Adjust error reason for ssl_get_min_max_version() failure
a92c9648cd Clear error queue entries from bad DLTS records
3d7e7e7c48 Prevent potential UAF in init_thread_deregister()
d1ca391123 EVP: Fix typo in EVP_PKEY_gen comment
3d4c81b09b Initialize outl in evp_enc.c to 0, protect against NULL
8ea761bf40 Add AES KW inverse ciphers to the EVP layer
769302a68b Remove FLOSS from all OSS builds on NonStop except for SPT threading.
08312719ba test/recipes/90-test_shlibload.t: Skip when address sanitizer enabled
3b1bfd2160 util/find-doc-nits: ignore OSSL_DEPRECATED*, alongside other reserved symbols
d14e7df852 Simplify and clarify doc/internal/man7/deprecation.pod
908cf7cefb Patch leak in EVP_PKEY2PKCS8() error path
62a3614372 Allow empty deprecation macros to be passed as macro arguments
e82f45982c Fix some missed usage of DEFINE_LHASH_OF()
140eee2b3b Add easy to digest selector macros for EVP_PKEYs
f79289389e test/recipes/15-test_gendh.t: don't try DER params

Build log ended with (last 100 lines):

../../../../../enable-fuzz-afl/util/wrap.pl ../../../../../enable-fuzz-afl/apps/openssl cmp -config ../Mock/test.cnf -section 'Mock credentials' -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -cert "" -key "" -keypass "" -unprotected_requests => 0
    not ok 38 - unprotected request
# ------------------------------------------------------------------------------
    #   Failed test 'unprotected request'
    #   at ../openssl/test/recipes/81-test_cmp_cli.t line 183.
    # Looks like you failed 3 tests of 38.
not ok 5 - CMP app CLI Mock credentials
# ------------------------------------------------------------------------------
# cmp_main:../openssl/apps/cmp.c:2665:CMP info: using OpenSSL configuration file '../Mock/test.cnf'
# opt_str:../openssl/apps/cmp.c:2263:CMP warning: argument of -proxy option is empty string, resetting option
# warn_cert_msg:../openssl/apps/cmp.c:690:CMP warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# setup_client_ctx:../openssl/apps/cmp.c:1980:CMP info: will contact http://127.0.0.1:1700/pkix/
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:166:CMP info: sending IR
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:184:CMP info: received IP
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:166:CMP info: sending CERTCONF
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:184:CMP info: received PKICONF
# save_free_certs:../openssl/apps/cmp.c:2030:CMP info: received 1 enrolled certificate(s), saving to file '../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.certout_popo1.pem'
../../../../../enable-fuzz-afl/util/wrap.pl ../../../../../enable-fuzz-afl/apps/openssl cmp -config ../Mock/test.cnf -section 'Mock enrollment' -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -cmd ir -newkey new.key -newkeypass 'pass:' -popo 0 -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.certout_popo1.pem -out_trusted root.crt => 0
    not ok 43 - popo RAVERIFIED
# ------------------------------------------------------------------------------
# cmp_main:../openssl/apps/cmp.c:2665:CMP info: using OpenSSL configuration file '../Mock/test.cnf'
# opt_str:../openssl/apps/cmp.c:2263:CMP warning: argument of -proxy option is empty string, resetting option
# warn_cert_msg:../openssl/apps/cmp.c:690:CMP warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# setup_client_ctx:../openssl/apps/cmp.c:1980:CMP info: will contact http://127.0.0.1:1700/pkix/
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:166:CMP info: sending IR
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:184:CMP info: received IP
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:166:CMP info: sending CERTCONF
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:184:CMP info: received PKICONF
# save_free_certs:../openssl/apps/cmp.c:2030:CMP info: received 1 enrolled certificate(s), saving to file '../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.certout_popo5.pem'
../../../../../enable-fuzz-afl/util/wrap.pl ../../../../../enable-fuzz-afl/apps/openssl cmp -config ../Mock/test.cnf -section 'Mock enrollment' -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -cmd ir -newkey new.key -newkeypass 'pass:' -popo -1 -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.certout_popo5.pem -out_trusted root.crt => 0
    not ok 47 - popo NONE
# ------------------------------------------------------------------------------
    #   Failed test 'popo NONE'
    #   at ../openssl/test/recipes/81-test_cmp_cli.t line 183.
# cmp_main:../openssl/apps/cmp.c:2665:CMP info: using OpenSSL configuration file '../Mock/test.cnf'
# opt_str:../openssl/apps/cmp.c:2263:CMP warning: argument of -proxy option is empty string, resetting option
# warn_cert_msg:../openssl/apps/cmp.c:690:CMP warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# setup_client_ctx:../openssl/apps/cmp.c:1980:CMP info: will contact http://127.0.0.1:1700/pkix/
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:166:CMP info: sending IR
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:184:CMP info: received IP
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:166:CMP info: sending CERTCONF
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:184:CMP info: received PKICONF
# save_free_certs:../openssl/apps/cmp.c:2030:CMP info: received 1 enrolled certificate(s), saving to file '../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.certout_popo6.pem'
../../../../../enable-fuzz-afl/util/wrap.pl ../../../../../enable-fuzz-afl/apps/openssl cmp -config ../Mock/test.cnf -section 'Mock enrollment' -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -cmd ir -newkey new.key -newkeypass 'pass:' -popo 2 -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_cli/test.certout_popo6.pem -out_trusted root.crt => 0
    not ok 48 - popo KEYENC not supported
# ------------------------------------------------------------------------------
    # Looks like you failed 3 tests of 92.
not ok 7 - CMP app CLI Mock enrollment
# ------------------------------------------------------------------------------
# 
#   Failed test 'CMP app CLI Mock enrollment
# '
#   at /home/openssl/run-checker/enable-fuzz-afl/../openssl/util/perl/OpenSSL/Test.pm line 1335.
# Looks like you failed 3 tests of 7.81-test_cmp_cli.t .................. 
Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/7 subtests 
90-test_asn1_time.t ................ ok
90-test_async.t .................... ok
90-test_bio_enc.t .................. ok
90-test_bio_memleak.t .............. ok
90-test_constant_time.t ............ ok
90-test_fatalerr.t ................. ok
90-test_gmdiff.t ................... ok
90-test_gost.t ..................... skipped: GOST support is disabled in this OpenSSL build
90-test_ige.t ...................... ok
90-test_includes.t ................. ok
90-test_memleak.t .................. ok
90-test_overhead.t ................. ok
90-test_secmem.t ................... ok
90-test_shlibload.t ................ skipped: Test only supported in a shared build
90-test_srp.t ...................... ok
90-test_sslapi.t ................... ok
90-test_sslbuffers.t ............... ok
90-test_store.t .................... ok
90-test_sysdefault.t ............... ok
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. ok
90-test_tls13encryption.t .......... ok
90-test_tls13secrets.t ............. skipped: tls13secrets is not supported in this build
90-test_v3name.t ................... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_gost_engine.t ..... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz.t ..................... ok

Test Summary Report
-------------------
81-test_cmp_cli.t                (Wstat: 768 Tests: 7 Failed: 3)
  Failed tests:  4-5, 7
  Non-zero exit status: 3
Files=212, Tests=3042, 588 wallclock secs (10.10 usr  1.29 sys + 521.23 cusr 57.07 csys = 589.69 CPU)
Result: FAIL
Makefile:2405: recipe for target '_tests' failed
make[1]: *** [_tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/enable-fuzz-afl'
Makefile:2403: recipe for target 'tests' failed
make: *** [tests] Error 2