Still FAILED build of OpenSSL branch master with options -d --strict-warnings no-dtls1_2

OpenSSL run-checker openssl at openssl.org
Wed Mar 24 00:40:58 UTC 2021


Platform and configuration command:

$ uname -a
Linux run 5.4.0-65-generic #73-Ubuntu SMP Mon Jan 18 17:25:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
$ CC=clang ../openssl/config -d --strict-warnings no-dtls1_2

Commit log since last time:

6e34a1048c ASN1: Reset the content dump flag after dumping
abded2ced4 evp: fix coverity 1473380: copy into fixed size buffer
c38048e793 sslapitest: fix problem in cleanup on failure path
b6d1bd4eb8 evp: fix coverity 1473381 - dereference after null check
72ded6f2a9 x509: coverity 1472673 & 1472693 - dereference after null checks
f1619160c8 test: coverity 1469426 - dereference after null check
88ce406c89 ssl: coverity 1465527 - dereference after null check
8f586f5bc1 test: coverity 1455749 - dereference after null check
337ace06b9 test: coverity 1455747 - dereference after null check
b6f0f546ff async: coverity 1446224 - dereference after null check
28c21fa048 evp: fix coverity 1445872 - dereference after null check
07aa88cccf decoder: fix Coverity 1473236 & 1473386: resource leaks
77b8b49bdd apps: fix Coverity 1472670 & 1472685: resource leaks
bca681aa5b rsa: fix coverity 1472658: resource leak
7153f54437 evp: fix coverity 1470561: resource leak
9b0f76e12f test: fix coverity 1470559: resource leak
015b221a5f test: fix coverity 1455330, 1455332, 1455334, 1455342, 1455344 : resource leak
e22105d1b3 ssl: fix coverity 1451495: resource leak
65bf029d49 test: fix coverity 1414449 & 1414471: resource leak
c0cd48fcb9 test: fix coverity 1414445: resource leak
316c8dafd4 test: fix coverity 1454040: resource leak
743840d56f test: fix coverity 1451562: resource leak
b573d0ceea test: fix coverity 1451553: resource leak
aff442dc38 Make ossl_d2i_PUBKEY_legacy() completely libcrypto internal
695c96ba51 Make evp_privatekey_from_binary() completely libcrypto internal
55d9ccca8e TEST: Clarify and adjust test/recipes/30-test_evp.t
c640b68785 STORE: Use the same error avoidance criteria as for the DER->key decoder
ff1c10d920 TEST: Modify test/endecode_test.c to give the decoder callback the structure
f4e46b817d PROV: Add type specific MSBLOB and PVK decoding for the MS->key decoders
cf33379997 PROV: Add type specific PKCS#8 decoding to the DER->key decoders
e0be34beee PROV: Add RSA-PSS specific OSSL_FUNC_KEYMGMT_LOAD function
06f6761280 PROV: Add type specific SubjectPublicKeyInfo decoding to the DER->key decoders
65ef000ec2 PROV: Refactor DER->key decoder
2d101b0f49 Configure: check all DEPEND values against GENERATE, not just .h files
6084b5c2c9 EVP_PKEY_get_*_param should work with legacy
03cd9d2f23 ASYNC_start_job: Reset libctx when async_fibre_swapcontext fails
0e2f87c03e Added functions for printing EVP_PKEYs to FILE *
39f6bf33e5 test: fix Coverity 1454818: use after free
ebdb5cccde Fix windows build compiler issue.
2154a7a754 Update README-FIPS.md
9fe4f5bc82 Fix a missing rand -> ossl_rand rename
ee067bc066 Ensure we deregister thread handlers even after a failed init
7e7e034a10 apps: fix coverity 966560: division by zero
3de7f014a9 ssl: fix coverity 1451515: out of bounds memory access
145f12d12d modes: fix coverity 1449860: overlapping memory copy
b875e0e820 modes: fix coverity 1449851: overlapping memory copy
cf3306dc6b Remove TODO comment. Resolves #14396
628d2d3a7f Fixing stack buffer overflow error caused by incorrectly sized array.
c8830891e6 Add ossl_provider symbols
3022b7f404 Rename CMS_si_check_attributes to ossl_cms_si_check_attributes
78715dcc31 rename err_get_state_int() to ossl_err_get_state_int()
6d7776892f Add ossl_is_partially_overlapping symbol
4e17fb0061 Add ossl_pkcs5_pbkdf2_hmac_ex symbol
b78c016649 Add ossl_pem_check_suffix symbol
4669015d7b Add ossl_ x509 symbols
6dd4b77a85 Add ossl_gost symbols
285aa80ef1 Add ossl_lhash symbols
b54cab31d2 Add ossl_ symbol to x509 policy
fc27fca84a Add ossl_bn_group symbols
ff0266eddc Add ossl_sa symbols
8a6e912520 Add ossl_ symbols for sm3 and sm4
7bbadfc15a Add ossl_siv symbols
78f32a3165 Add ossl_aria symbols
f148f7034c Add ossl_ conf symbols
054d43ff97 Add ossl_ ecx symbols
47864aeafd Add ossl_v3 symbols
4158b0dc1d Add ossl_rsa symbols
2858156e03 Add ossl_encode symbols
adf7e6d1d6 Add ossl_asn1 symbols
1335ca4b07 Add ossl_rand symbols
9500c8234d Fix misc external ossl_ symbols.
e4bec86910 Fix external symbols for crypto_*
63b64f19c1 TS and CMS CAdES-BES: Refactor check_signing_certs() funcs into common ESS func
bef876f97e ts_check_signing_certs(): Make sure both ESSCertID and ESSCertIDv2 are checked
6b937ae3a7 TS ESS: Invert the search logic of ts_check_signing_certs() to correctly cover cert ID list
49f07be43d apps.c: Fix missing newline in warn_cert_msg() output
d07d805799 Add tests for the limited Unicode code point range
eb27d75788 ASN1: check the Unicode code point range in ASN1_mbstring_copy()
ba64e5a92a ASN1: limit the Unicode code point range in UTF8_getc() and UTF8_putc()
90165623a5 ASN1: add an internal header to validate Unicode ranges
11c7874d0c ci: add a no-legacy build

Build log ended with (last 100 lines):

        # false
        # OPENSSL_TEST_RAND_ORDER=1616545795
        not ok 2 - iteration 2
# ------------------------------------------------------------------------------
    # OPENSSL_TEST_RAND_ORDER=1616545795
    not ok 56 - test_ssl_pending
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/sslapitest ../../../openssl/test/certs ../../../openssl/test/recipes/90-test_sslapi_data/passwd.txt /tmp/tLdR10VKLV default ../../../openssl/test/default.cnf => 1
not ok 1 - running sslapitest
# ------------------------------------------------------------------------------
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
    # SSL_connect() failed -1, 1
    # 80A1377D737F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:975
    # SSL_accept() failed -1, 1
    # 80A1377D737F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:1003
    # false
    # OPENSSL_TEST_RAND_ORDER=1616545808
    not ok 3 - test_large_message_dtls
# ------------------------------------------------------------------------------
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
    # SSL_connect() failed -1, 1
    # 80A1377D737F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # INFO:  @ ../openssl/test/helpers/ssltestlib.c:975
    # SSL_accept() failed -1, 1
    # 80A1377D737F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
    # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:1484
    # false
    # ERROR: (bool) 'execute_cleanse_plaintext(DTLS_server_method(), DTLS_client_method(), DTLS1_VERSION, 0) == true' failed @ ../openssl/test/sslapitest.c:1562
    # false
    # OPENSSL_TEST_RAND_ORDER=1616545808
    not ok 4 - test_cleanse_plaintext
# ------------------------------------------------------------------------------
        # INFO:  @ ../openssl/test/helpers/ssltestlib.c:957
        # SSL_connect() failed -1, 1
        # 80A1377D737F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
        # INFO:  @ ../openssl/test/helpers/ssltestlib.c:975
        # SSL_accept() failed -1, 1
        # 80A1377D737F0000:error:0A000129:SSL routines:tls_setup_handshake:no suitable digest algorithm:../openssl/ssl/statem/statem_lib.c:121:The max supported SSL/TLS version needs the MD5-SHA1 digest but it is not available in the loaded providers. Use (D)TLSv1.2 or above, or load different providers
        # ERROR: (bool) 'create_ssl_connection(serverssl, clientssl, SSL_ERROR_NONE) == true' failed @ ../openssl/test/sslapitest.c:6633
        # false
        # OPENSSL_TEST_RAND_ORDER=1616545808
        not ok 2 - iteration 2
# ------------------------------------------------------------------------------
    # OPENSSL_TEST_RAND_ORDER=1616545808
    not ok 56 - test_ssl_pending
# ------------------------------------------------------------------------------
../../util/wrap.pl ../../test/sslapitest ../../../openssl/test/certs ../../../openssl/test/recipes/90-test_sslapi_data/passwd.txt /tmp/tLdR10VKLV fips ../../../openssl/test/fips-and-base.cnf => 1
not ok 2 - running sslapitest
# ------------------------------------------------------------------------------
#   Failed test 'running sslapitest'
#   at ../openssl/test/recipes/90-test_sslapi.t line 38.
# Looks like you failed 2 tests of 2.90-test_sslapi.t ................... 
Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/2 subtests 
90-test_sslbuffers.t ............... ok
90-test_store.t .................... ok
90-test_sysdefault.t ............... ok
90-test_threads.t .................. ok
90-test_time_offset.t .............. ok
90-test_tls13ccs.t ................. ok
90-test_tls13encryption.t .......... ok
90-test_tls13secrets.t ............. ok
90-test_v3name.t ................... ok
91-test_pkey_check.t ............... ok
95-test_external_boringssl.t ....... skipped: No external tests in this configuration
95-test_external_gost_engine.t ..... skipped: No external tests in this configuration
95-test_external_krb5.t ............ skipped: No external tests in this configuration
95-test_external_pyca.t ............ skipped: No external tests in this configuration
99-test_ecstress.t ................. ok
99-test_fuzz_asn1.t ................ ok
99-test_fuzz_asn1parse.t ........... ok
99-test_fuzz_bignum.t .............. ok
99-test_fuzz_bndiv.t ............... ok
99-test_fuzz_client.t .............. ok
99-test_fuzz_cmp.t ................. ok
99-test_fuzz_cms.t ................. ok
99-test_fuzz_conf.t ................ ok
99-test_fuzz_crl.t ................. ok
99-test_fuzz_ct.t .................. ok
99-test_fuzz_server.t .............. ok
99-test_fuzz_x509.t ................ ok

Test Summary Report
-------------------
80-test_dtls.t                   (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
80-test_ssl_new.t                (Wstat: 768 Tests: 30 Failed: 3)
  Failed tests:  7, 16, 18
  Non-zero exit status: 3
90-test_sslapi.t                 (Wstat: 512 Tests: 2 Failed: 2)
  Failed tests:  1-2
  Non-zero exit status: 2
Files=233, Tests=3290, 944 wallclock secs (14.95 usr  1.49 sys + 853.22 cusr 87.76 csys = 957.42 CPU)
Result: FAIL
make[1]: *** [Makefile:3279: _tests] Error 1
make[1]: Leaving directory '/home/openssl/run-checker/no-dtls1_2'
make: *** [Makefile:3276: tests] Error 2


More information about the openssl-commits mailing list