t...@gmplib.org (Torbjörn Granlund) writes:
> Let's move on. No bug to be found here.
Just FYI: There was a bug in Nettle's test code, a line
assert (mpz_invert(key->d, pub->e, phi));
Obviously not working with -DNDEBUG. Fix in commit
Ciao,
I'm not sending to oss-security... They does not seem to be interested.
Il Gio, 3 Gennaio 2019 9:42 pm, Jeffrey Walton ha scritto:
> On Thu, Jan 3, 2019 at 2:55 PM Marco Bodrato
> wrote:
>> This absolutely is NOT a "small example", it requires to build two
>> entire libraries!
> Well,
Jeffrey Walton writes:
Here's what I witness on a BananaPi and a couple of other boards. Can
you provide info on the ARM boards you are using? I have about 8 of
them for testing, and I may be able to duplicate your [successful]
result.
Marco and others have told you to read the GMP
Thanks Marco. Comments inline.
On Thu, Jan 3, 2019 at 2:55 PM Marco Bodrato wrote:
>
> Il Lun, 31 Dicembre 2018 7:03 pm, Jeffrey Walton ha scritto:
> [...skipping opinions...]
>
> > Here's a small example of triggering an assert using the Nettle
> > library.
>
> This absolutely is NOT a "small
Ciao,
Il Lun, 31 Dicembre 2018 7:03 pm, Jeffrey Walton ha scritto:
[...skipping opinions...]
> Here's a small example of triggering an assert using the Nettle
> library.
This absolutely is NOT a "small example", it requires to build two entire
libraries!
Anyway we analysed it, see below.
> ARM
The assert that Jeffrey has hit is in sec_powm.c,
ASSERT_ALWAYS (enb >= windowsize);
As far as I can see, "enb" is the input argument to the win_size function,
and "windowsize" is the return value. I'm waiting for more information,
since it works fine in my build. Possible
Vincent Lefevre writes:
> If you
> don't like that, you can write a wrapper library that will sanitize
> all the inputs and implement error processing (e.g. where the return
> value contains an error code and the result, if any), and call this
> library instead of GMP.
Regarding invalid inputs,
On 2018-12-31 14:38:17 -0500, Jeffrey Walton wrote:
> On Mon, Dec 31, 2018 at 2:16 PM Vincent Lefevre wrote:
> >
> > On 2018-12-31 13:03:27 -0500, Jeffrey Walton wrote:
> > > The GMP library uses asserts to crash a program at runtime when
> > > presented with data it did not expect. The library
Jeffrey Walton writes:
> The GMP library uses asserts to crash a program at runtime when
> presented with data it did not expect. The library also ignores user
> requests to remove asserts using Posix's -DNDEBUG. Posix asserts are a
> deugging aide intended for developement, and using them in
On 2019-01-01 11:22:56 +0100, Joerg Arndt wrote:
> * Vincent Lefevre [Jan 01. 2019 11:11]:
> > [...]
> > >
> > > Second, the SIGABRT terminates the process and can write a core file.
> >
> > That's the default behavior, but you can trap SIGABRT if you want.
>
> From man 3 abort:
> If the
On Mon, Dec 31, 2018 at 2:16 PM Vincent Lefevre wrote:
>
> On 2018-12-31 13:03:27 -0500, Jeffrey Walton wrote:
> > The GMP library uses asserts to crash a program at runtime when
> > presented with data it did not expect. The library also ignores user
> > requests to remove asserts using Posix's
11 matches
Mail list logo