[openssl-users] FW: Visual Studio compiler error for WinCE since OpenSSL version 1.0.1k

[Jakob Bohm]

On 21/11/2016 19:52, Eichenberger, John wrote:
>
> I am building both OpenSSL and WPA Supplicant for use on a Windows 
> Mobile 6.5 platform.
>
> The WPA Supplicant version in use is based upon the hostap_2_0 tag 
> from http://w1.fi/hostap.git.
>
> The version of OpenSSL that we have been using until now is based upon 
> the OpenSSL_1_0_1g from https://github.com/openssl/openssl
>
> I can upgrade to OpenSSL_1_0_1j and still succeed.  But when I merge 
> changes from OpenSSL_1_0_1k, all 802.1x authentication fails.
>
> I narrowed this problem down to a single line in 
> crypto/constant_time_locl.h.  Attached is the patch set that I applied 
> to resolve this issue for me.
>
> It is a confusing issue because I can compile that same bit of code in 
> Visual Studio within a different trivial application and see that 
> although the two methods for that bit of code produce slightly 
> different assembly language, both should produce the same result.  And 
> for that trivial application they do!  So why this difference breaks 
> authentication for me when it is all thrown together makes no sense.
>
> In my patch set you can see that I also changed what compiler switches 
> are used for the WinCE target.  That change did not appear to fix or 
> break anything.
>
>
I presume you are building for the ARM architecture since you
didn't specify.

Have you checked if reverting to the old compiler switches makes
1.0.1k work properly (even though it didn't break 1.0.1j)?

The entire thing looks like a compiler bug in handling the
expression used in 1.0.1k?

Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded