On 2024-10-24 2:56 p.m., Peter Marko via lists.openembedded.org wrote:
-----Original Message-----
From: Richard Purdie<[email protected]>
Sent: Thursday, October 24, 2024 12:14
To: Marko, Peter (FT D EU SK BFS1)<[email protected]>;
[email protected]; Steve Sakoman
<[email protected]>
Subject: Re: [OE-core][PATCH] openssl: upgrade 3.3.1 -> 3.4.0
On Thu, 2024-10-24 at 09:19 +0100, Richard Purdie via
lists.openembedded.org wrote:
On Wed, 2024-10-23 at 20:48 +0200, Peter Marko via
lists.openembedded.org wrote:
From: Peter Marko<[email protected]>
Release information:
https://github.com/openssl/openssl/blob/openssl-3.4/NEWS.md#major-
changes-between-openssl-33-and-openssl-340-22-oct-2024
Handles CVE-2024-9143
Refreshed patches.
Signed-off-by: Peter Marko<[email protected]>
---
...ke-history-reporting-when-test-fails.patch | 53 ++++++++-------
----
...1-Configure-do-not-tweak-mips-cflags.patch | 4 +-
...sysroot-and-debug-prefix-map-from-co.patch | 4 +-
.../{openssl_3.3.1.bb => openssl_3.4.0.bb} | 2 +-
4 files changed, 28 insertions(+), 35 deletions(-)
rename meta/recipes-connectivity/openssl/{openssl_3.3.1.bb =>
openssl_3.4.0.bb} (99%)
Unfortunately this causes a regression in python3's ptest:
https://valkyrie.yoctoproject.org/#/builders/73/builds/270
I did revert this patch and tested a build and that passes so it is
definitely from here.
I'm trying this in conjunction with the python 3.13 upgrade which
might
let us fix this for master but if so, the problem for styhead and
earlier will probably remain.
There was a related python bug:
https://github.com/python/cpython/issues/87743
Copying Steve so he knows that gremlins lurk here...
The 3.13 upgrade doesn't help so we're going to need to resolve the
ptest issue somehow to merge this...
Cheers,
Richard
Richard,
I was able to bisect openssl
tohttps://github.com/openssl/openssl/commit/933f57dfe21657f7aba8f13e0cdb3b02dd64fcc3
When I revert this commit, then the python3-ptest succeeds also with openssl
3.4.0.
I have createdhttps://github.com/python/cpython/issues/125936 to inform cpython
maintainers.
I don't have enough knowledge to fix it myself but I think that the openssl
commit breaking things should be great lead for someone else.
During the investigation, I have also found 2 following problems with python:
1) when running ptest in core-image-minimal, there are two crashes in console
(both with openssl 3.3.1 and 3.4.0):
[ 91.482461] python3[8605]: segfault at 10 ip 00007f5b0760f561 sp
00007ffeda12c440 error 4 in libpython3.12.so.1.0[1ae561,7f5b07566000+23c000]
likely on CPU 0 (core 0, socket 0)
[ 91.485213] Code: 0f 1f 84 00 00 00 00 00 90 41 54 55 53 48 89 fb 66 48 8d 3d c9
d9 35 00 66 66 48 e8 79 90 f5 ff 4c 8b 25 ca d7 35 00 48 8b 00 <48> 8b 68 10 49
3b 6c 24 30 74 09 f6 85 b0 06 00 00 20 75 4b 48 8d
[ 118.871057] python3[12214]: segfault at 10 ip 00007f7ad5dd2561 sp
00007f7ad50f7dd0 error 4 in libpython3.12.so.1.0[1ae561,7f7ad5d29000+23c000]
likely on CPU 2 (core 2, socket 0)
[ 118.873991] Code: 0f 1f 84 00 00 00 00 00 90 41 54 55 53 48 89 fb 66 48 8d 3d c9
d9 35 00 66 66 48 e8 79 90 f5 ff 4c 8b 25 ca d7 35 00 48 8b 00 <48> 8b 68 10 49
3b 6c 24 30 74 09 f6 85 b0 06 00 00 20 75 4b 48 8d
2) python ptest parsing is wrong, it detected only one from 8 test failures
(see my cpython issue and ptest logs).
Could someone create Bugzilla entries for these?
Done.
https://bugzilla.yoctoproject.org/show_bug.cgi?id=15644
Are you willing and able to create an YP BZ account Peter:
https://bugzilla.yoctoproject.org/createaccount.cgi
../Randy
Regards,
Peter
--
# Randy MacLeod
# Wind River Linux
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#206900):
https://lists.openembedded.org/g/openembedded-core/message/206900
Mute This Topic: https://lists.openembedded.org/mt/109176901/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
