Still FAILED build of OpenSSL branch master with options -d enable-fuzz-afl no-shared no-module

Fri Feb 26 01:42:25 UTC 2021

Platform and configuration command:

$ uname -a
Linux run 5.4.0-52-generic #57-Ubuntu SMP Thu Oct 15 10:57:00 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
$ CC=afl-clang-fast ../openssl/config -d enable-fuzz-afl no-shared no-module

Commit log since last time:

6be27456e1 Fix string termination and length setting in OSSL_PARAM_BLD_push_utf8_string()
af8bd1d835 Fix OSSL_PARAM_allocate_from_text() for OSSL_PARAM_UTF8_STRING
a8eb71ad57 Allow the sshkdf type to be passed as a single character
da9988e0f5 Cleanup of some of the EVP_PKEY_CTX_ctrl related TODOs
b300f1cb3d Fix missing EOL at the end of the rsa/build.info
53cefef62b Remove inclusion of unnecessary header files
7415ffe368 Use strcasecmp when comparing kdf_type
861f265a40 speed: Drop deprecated <ALG>_options() calls
f3ccfc76fe speed: Use EVP for ciphers, cmac, ghash, rsa, dsa, and ecdsa
a89cd8d87c speed: Adapt digests and hmac to always use non-deprecated APIs
ee1d7f1d25 speed: Drop code to handle platforms without SIGALRM
af9f2ee339 Fix typo in comment in DH_set0_pqg function
81c15ed00b Test errors from a provider can still be accessed after unload
de4a88a979 Duplicate the file and func error strings
b0001d0cf2 provider: add an unquery function to allow providers to clean up.
8b3facd732 rand: note that locking needs to be explicitly enabled.
76e48c9d66 Deprecated EVP_PKEY_CTX_get0_dh_kdf_ukm() and EVP_PKEY_CTX_get0_ecdh_kdf_ukm()
10315851d0 X509: Refactor X509_PUBKEY processing to include provider side keys
ce0b307ea0 Remove disabled TLS 1.3 ciphers from the SSL(_CTX)
6eb7c748d1 make update
51d058cd94 appveyor.yml: clarify conditions for building the plain configuration
4f6aeabd65 make update
7b9f8995f4 Generate doc/build.info with 'make update' rather than on the fly
1263154064 changes: note the deprecation of RAND_METHOD APIs
299f5ff3b5 provider: add option to load a provider without disabling the fallbacks.
332a245c04 test: update tests to use the fake random number generator
d994ce1205 test: make the DRBG test work without RAND_METHOD support.
b3ab537b3a test: add framework for generic fake random number generator
9c6ee56318 rand: add DRBG/seed setting functions
f626c3ffae rand: allow lock/unlock functions to be absent
786b13fa77 RAND_METHOD deprecation: code changes
de2ea978b5 RAND_METHOD deprecation: fuzzer
0a89ae97d9 RAND_METHOD deprecation: tests
ac60c84fc4 RAND_METHOD deprecation: documentation
f5b00834dd EVP: Adapt the EC_KEY specific EVP_PKEY_CTX setter / getter functions
bbf4dc96fc EVP: Make checks in evp_pkey_ctx_store_cached_data() more restricted
13f91a7245 EVP: Adapt the RSA specific EVP_PKEY_CTX setter / getter functions
df4592cbec EVP: Adapt the DH specific EVP_PKEY_CTX setter / getter functions
5524580b5c EVP: Adapt the EVP_PKEY_CTX ctrl functions
6fcd92d3d7 EVP: Adapt diverse OSSL_PARAM setters and getters
5137312993 EVP: Make evp_pkey_ctx_{set,get}_params_strict() legacy aware
9a1c4e41e8 EVP: Implement data-driven translation between known ctrl and OSSL_PARAMs
4d4928edd0 EVP: make evp_pkey_is_assigned() usable in the FIPS module
e19246dc72 EVP: Make evp_pkey_ctx_state() available to all of EVP
6179dfc7c4 EVP: Implement EVP_PKEY_CTX_is_a()
f627561cf5 util/perl/OpenSSL/config.pm: Add VMS specific C compiler settings
9e1094ad3d util/perl/OpenSSL/config.pm: Fix determine_compiler_settings()
444b25b1e9 Add back in legacy paths for d2i_PrivateKey/d2i_AutoPrivateKey.
f16f363a85 Fix no-tests on mingw
636a93454d Note that the OSSL_CORE_MAKE_FUNC macro is reserved
510d019141 Document the OSSL_PARAM_DEFN macro
18b207c798 Add documentation for the macro OPENSSL_VERSION_PREREQ
7e1d7fea39 Document OPENSSL_LH_flush()
bc4d84abce Suppress errors about undocumented asn1_d2i_read_bio
6ceaf67257 Fix -pkeyopt handling in apps/pkeyutl -rawin
7f90026b3f Handle NULL result of ERR_reason_error_string() in some apps
4718326a46 Add EVP_PKEY_public_check_quick.
681618cfc1 Fix external symbols for pkcs7.
53155f1c81 Fix external symbols for cms.

Build log ended with (last 100 lines):

../../../../../enable-fuzz-afl/util/wrap.pl ../../../../../enable-fuzz-afl/apps/openssl cmp -config ../Mock/test.cnf -section 'Mock enrollment' -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -cmd ir -newkey new.key -newkeypass 'pass:' -popo -1 -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_http/test.certout_popo5.pem -out_trusted root.crt => 0
    not ok 47 - popo NONE
# ------------------------------------------------------------------------------
    #   Failed test 'popo NONE'
    #   at ../openssl/test/recipes/80-test_cmp_http.t line 145.
# cmp_main:../openssl/apps/cmp.c:2692:CMP info: using section(s) 'Mock enrollment' of OpenSSL configuration file '../Mock/test.cnf'
# opt_str:../openssl/apps/cmp.c:2291:CMP warning: argument of -proxy option is empty string, resetting option
# warn_cert_msg:../openssl/apps/cmp.c:694:CMP warning: certificate from 'trusted.crt' with subject '/O=openssl_cmp' is not a CA cert
# setup_client_ctx:../openssl/apps/cmp.c:2008:CMP info: will contact http://127.0.0.1:1700/pkix/
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:167:CMP info: sending IR
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:187:CMP info: received IP
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:167:CMP info: sending CERTCONF
# send_receive_check:../openssl/crypto/cmp/cmp_client.c:187:CMP info: received PKICONF
# save_free_certs:../openssl/apps/cmp.c:2058:CMP info: received 1 enrolled certificate(s), saving to file '../../../../../enable-fuzz-afl/test-runs/test_cmp_http/test.certout_popo6.pem'
../../../../../enable-fuzz-afl/util/wrap.pl ../../../../../enable-fuzz-afl/apps/openssl cmp -config ../Mock/test.cnf -section 'Mock enrollment' -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_http/test.cert.pem -proxy '' -no_proxy 127.0.0.1 -cmd ir -newkey new.key -newkeypass 'pass:' -popo 2 -certout ../../../../../enable-fuzz-afl/test-runs/test_cmp_http/test.certout_popo6.pem -out_trusted root.crt => 0
    not ok 48 - popo KEYENC not supported
# ------------------------------------------------------------------------------
    # Looks like you failed 3 tests of 92.
not ok 5 - CMP app CLI Mock enrollment
# ------------------------------------------------------------------------------
# 
#   Failed test 'CMP app CLI Mock enrollment
# '
#   at /home/openssl/run-checker/enable-fuzz-afl/../openssl/util/perl/OpenSSL/Test.pm line 1335.
# Looks like you failed 3 tests of 5.80-test_cmp_http.t ................. 
Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/5 subtests 

# 80-test_cms.t ...................... ok
80-test_cmsapi.t ................... ok
80-test_ct.t ....................... ok
80-test_dane.t ..................... ok
80-test_dtls.t ..................... ok
80-test_dtls_mtu.t ................. ok
80-test_dtlsv1listen.t ............. ok
80-test_http.t ..................... ok
80-test_ocsp.t ..................... ok
80-test_pkcs12.t ................... ok
80-test_ssl_new.t .................. ok
80-test_ssl_old.t .................. ok
80-test_ssl_test_ctx.t ............. ok
80-test_sslcorrupt.t ............... ok
80-test_tsa.t ...................... ok
80-test_x509aux.t .................. ok
81-test_cmp_cli.t .................. ok
90-test_asn1_time.t ................ ok
90-test_async.t .................... ok
90-test_bio_enc.t .................. ok
90-test_bio_memleak.t .............. ok
90-test_constant_time.t ............ ok
90-test_fatalerr.t ................. ok
90-test_fipsload.t ................. skipped: Test only supported in a shared build
90-test_gmdiff.t ................... ok
90-test_gost.t ..................... skipped: GOST support is disabled in this OpenSSL build
90-test_ige.t ...................... ok
90-test_includes.t ................. ok
90-test_memleak.t .................. ok
90-test_overhead.t ................. ok
90-test_secmem.t ................... ok
90-test_shlibload.t ................ skipped: Test only supported in a shared build
90-test_srp.t ...................... ok
90-test_sslapi.t ................... ok
90-test_sslbuffers.t ............... ok
90-test_store.t .................... ok
90-test_sysdefault.t ............... ok
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. ok
90-test_tls13encryption.t .......... ok
90-test_tls13secrets.t ............. skipped: tls13secrets is not supported in this build
90-test_v3name.t ................... ok
91-test_pkey_check.t ............... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_gost_engine.t ..... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz_asn1.t ................ ok
99-test_fuzz_asn1parse.t ........... ok
99-test_fuzz_bignum.t .............. ok
99-test_fuzz_bndiv.t ............... ok
99-test_fuzz_client.t .............. ok
99-test_fuzz_cmp.t ................. ok
99-test_fuzz_cms.t ................. ok
99-test_fuzz_conf.t ................ ok
99-test_fuzz_crl.t ................. ok
99-test_fuzz_ct.t .................. ok
99-test_fuzz_server.t .............. ok
99-test_fuzz_x509.t ................ ok

Test Summary Report
-------------------
80-test_cmp_http.t               (Wstat: 768 Tests: 5 Failed: 3)
  Failed tests:  2-3, 5
  Non-zero exit status: 3
Files=232, Tests=2737, 824 wallclock secs (10.21 usr  1.28 sys + 740.31 cusr 71.40 csys = 823.20 CPU)
Result: FAIL
make[1]: *** [Makefile:2482: _tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/enable-fuzz-afl'
make: *** [Makefile:2479: tests] Error 2