1.0.1a build failure on OS X

2012-04-20 Thread Brian Wellington
I just tried building 1.0.1a on OS X (Lion, if it matters), and it failed with: Undefined symbols for architecture x86_64: _rc4_md5_enc, referenced from: _rc4_hmac_md5_cipher in libcrypto.a(e_rc4_hmac_md5.o) ld: symbol(s) not found for architecture x86_64 Looking through the CVS logs, I

RE: OpenSSL Security Advisory

2012-04-20 Thread Murphy, Sandra
Also - any idea if BBN is using OpenSSL? --Sandy From: owner-openssl-...@openssl.org [owner-openssl-...@openssl.org] on behalf of OpenSSL [open...@master.openssl.org] Sent: Thursday, April 19, 2012 9:04 AM To: openssl-annou...@master.openssl.org;

Re: Compile error with MinGW-w64

2012-04-20 Thread Jonathan Liu
On 16/04/2012 2:31 AM, Andy Polyakov wrote: What happens if you add wait; at the very end of crypto/asm/sha1-x86_64.pl? It just hangs. 'which perl'? If not /bin/perl, i.e. non-MSYS perl, then I'd suggest to complement MSYS installation with MSYS perl. It works with MSYS perl. Thanks. I was

[openssl.org #2794] [PATCH] Remove branch hint to improve crypto algorithms performance on Power

2012-04-20 Thread Ashley via RT
The not-taken branch hint in the assembly code causes performance degradation as the hardware always predict the specific branch that way. The branch hint is not necessary as the hardware prediction is very good and getting better. The patch attached removed the branch hint to let the hardware do

Re: [openssl.org #2794] [PATCH] Remove branch hint to improve crypto algorithms performance on Power

2012-04-20 Thread Ashley via RT
The alignments of the performance results I did before sending it out did not come out right, my apologies. Please find my performance results spreadsheet attached. Regards, Ashley Lai On Wed, 2012-04-18 at 18:52 -0500, Ashley Lai wrote: The not-taken branch hint in the assembly code causes

[openssl.org #2795] openssl-1.0.1a - undefined symbol: OPENSSL_ia32cap_P with ultrasparc cpus (solution inside)

2012-04-20 Thread Daniel Flinkmann via RT
Hi, i got following error, when building the new openssl-1.0.1a package on a Sun Solaris 10 operation system with an UltraSPARC cpu: make[3]: Entering directory `/home/df/openssl-1.0.1a' [ -z ] || /opt/sunstudio/bin/cc -KPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -D_REENTRANT

[openssl.org #2796] fix for build problems with openssl 1.0.1a

2012-04-20 Thread Leena Heino via RT
Hi, Attached is a patch that fixes OpenSSL 1.0.1a build problems on a non x86 platform (Sparc). -- Leena Heino University of Tampere / Computer Centre ( liinu at uta.fi ) ( http://www.uta.fi/laitokset/tkk ) diff -Naur openssl-1.0.1a.orig/crypto/evp/e_rc4_hmac_md5.c

[openssl.org #2797] 1.0.1a build failure on OS X

2012-04-20 Thread Brian Wellington via RT
I just tried building 1.0.1a on OS X (Lion, if it matters), and it failed with: Undefined symbols for architecture x86_64: _rc4_md5_enc, referenced from: _rc4_hmac_md5_cipher in libcrypto.a(e_rc4_hmac_md5.o) ld: symbol(s) not found for architecture x86_64 Looking through the CVS logs, I

[openssl.org #2798] compilation of openssl-1.0.1a fails on my solaris-10 box

2012-04-20 Thread Friedrich Haubensak via RT
just tried to compile openssl-1.0.1a on my solaris 10 box, using studio 12.1 compiler, but after ./Configure solaris-sparcv9-cc shared compilation of openssl-1.0.1a fails (openssl-1.0.1 went ok): linking of openssl fails with the error: Undefined symbol OPENSSL_ia32cap_P first referenced

RE: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-20 Thread Erik Tkal
Hi Steve, thank you very much, that fixed it! Erik Erik Tkal Juniper OAC/UAC/Pulse Development -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Thursday, April

Re: Static analysis?

2012-04-20 Thread Jean-Marc Desperrier
On Tue, 17 Apr 2012, Lubomír Sedlář wrote: I would like to ask if any static analysis tool was ever used to detect possible problems in OpenSSL source code. Is some tool used regularly? I tried running Clang Static Analyzer [1] on the source of OpenSSL. Julia Lawall a écrit : A few years ago,

Re: Static analysis?

2012-04-20 Thread Julia Lawall
On Fri, 20 Apr 2012, Jean-Marc Desperrier wrote: On Tue, 17 Apr 2012, Lubomír Sedlář wrote: I would like to ask if any static analysis tool was ever used to detect possible problems in OpenSSL source code. Is some tool used regularly? I tried running Clang Static Analyzer [1] on the source of

Re: Static analysis?

2012-04-20 Thread Ben Laurie
On Tue, Apr 17, 2012 at 9:46 PM, Lubomír Sedlář lubomir.sed...@gmail.comwrote: Hello, I would like to ask if any static analysis tool was ever used to detect possible problems in OpenSSL source code. Is some tool used regularly? I tried running Clang Static Analyzer [1] on the source of

Re: Static analysis?

2012-04-20 Thread Ben Laurie
On Fri, Apr 20, 2012 at 4:53 PM, Jean-Marc Desperrier jmd...@free.frwrote: On Tue, 17 Apr 2012, Lubomír Sedlář wrote: I would like to ask if any static analysis tool was ever used to detect possible problems in OpenSSL source code. Is some tool used regularly? I tried running Clang Static

Re: Static analysis?

2012-04-20 Thread Dr. Stephen Henson
On Tue, Apr 17, 2012, Lubomr Sedl?? wrote: Some examples follow: http://www.fi.muni.cz/~xsedlar3/openssl-analysis/report-JxXj0g.html#EndPath The variable 'al' is never read. The goto should probably jump to 'f_err' in order not to lose the alert.