The new constant-time implementation of BN_num_bits_word in
OpenSSL 1.0.2o triggers a compiler bug in Microsoft C
14.00.60131 for ARM (part of Visual Studio 2005 SP1). The bug
happens at all optimizations levels except completely disabled.
Unfortunately, that version of Microsoft C is the official
system compiler for some popular versions of Windows CE.
I have not seen this bug in the MS compilers in Visual Studio
2012 (CL 17.00.60610.1) and Embedded Visual C++ 4.0 (CLARM.exe
12.20.9409), but those are system compilers for different CE
versions and the system headers are not compatible across
compilers.
Here is an example of what the function is miscompiled to:
BN_num_bits_word:
: E350 cmp r0, #0
0004: 0A07 beq |$LN3|
0008: E1A030A0 mov r3, r0, lsr #1
000C: E2633000 rsb r3, r3, #0
0010: E1A03FA3 mov r3, r3, lsr #31
0014: E2633000 rsb r3, r3, #0
0018: E2033001 and r3, r3, #1
001C: E3A02001 mov r2, #1
0020: E0830002 add r0, r3, r2
0024: E1A0F00E mov pc, lr
$LN3:
0028: E1A030A0 mov r3, r0, lsr #1
002C: E2633000 rsb r3, r3, #0
0030: E1A03FA3 mov r3, r3, lsr #31
0034: E2633000 rsb r3, r3, #0
0038: E2033001 and r3, r3, #1
003C: E3A02000 mov r2, #0
0040: E0830002 add r0, r3, r2
0044: E1A0F00E mov pc, lr
The patch below works around this, porting this to OpenSSL 1.1.x
is left as an exercise for the reader:
Work around a serious compiler bug in the system compiler for CE 5.00
(Including Windows Mobile 5.x and 6.x).
Author: WiseMo A/S, licensed under the Openssl license
diff -Naur openssl-1.0.2o.orig/crypto/bn/bn_lib.c
openssl-1.0.2o/crypto/bn/bn_lib.c
--- openssl-1.0.2o.orig/crypto/bn/bn_lib.c 2018-03-27
13:54:46.0 +
+++ openssl-1.0.2o/crypto/bn/bn_lib.c 2018-05-11 10:17:55.0 +
@@ -142,6 +142,27 @@
return (&const_one);
}
+#if _MSC_VER >= 1400 && _MSC_VER < 1500 && \
+ (defined(__arm__) || \
+ defined(__arm) || \
+ defined(_M_ARM) || \
+ defined(_ARM_) || \
+ defined(ARM) || \
+ defined(__ARMEL__) || \
+ defined(__ARM_BIG_ENDIAN) || \
+ defined(__MARM__) || \
+ defined(__ARM_ARCH) || \
+ defined(__thumb__) || \
+ defined(_M_THUMB) || \
+ defined(_THUMB_) || \
+ defined(THUMB))
+// This compiler (The Visual Studio 2005 ARM Compiler), at least with SP1
+// completely miscompiles BN_num_bits_word() !
+#define MS_BROKEN_BN_num_bits_word 1
+
+#pragma optimize("", off)
+#endif
+
int BN_num_bits_word(BN_ULONG l)
{
BN_ULONG x, mask;
@@ -197,6 +218,10 @@
return ((i * BN_BITS2) + BN_num_bits_word(a->d[i]));
}
+#ifdef MS_BROKEN_BN_num_bits_word
+#pragma optimize("", on)
+#endif
+
void BN_clear_free(BIGNUM *a)
{
int i;
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
