Re: Static analysis?

2012-04-20 Thread Dr. Stephen Henson
On Tue, Apr 17, 2012, Lubomr Sedl?? wrote: > > Some examples follow: > > http://www.fi.muni.cz/~xsedlar3/openssl-analysis/report-JxXj0g.html#EndPath > The variable 'al' is never read. The goto should probably jump to > 'f_err' in order not to lose the alert. > > http://www.fi.muni.cz/~xsedlar3/

Re: Static analysis?

2012-04-20 Thread Ben Laurie
On Fri, Apr 20, 2012 at 4:53 PM, Jean-Marc Desperrier wrote: > On Tue, 17 Apr 2012, Lubomír Sedlář wrote: >> >>> I would like to ask if any static analysis tool was ever used to detect >>> possible problems in OpenSSL source code. Is some tool used regularly? >>> I tried running Clang Static Analy

Re: Static analysis?

2012-04-20 Thread Ben Laurie
On Tue, Apr 17, 2012 at 9:46 PM, Lubomír Sedlář wrote: > Hello, > I would like to ask if any static analysis tool was ever used to detect > possible problems in OpenSSL source code. Is some tool used regularly? > > I tried running Clang Static Analyzer [1] on the source of OpenSSL. It > found 222

Re: Static analysis?

2012-04-20 Thread Julia Lawall
On Fri, 20 Apr 2012, Jean-Marc Desperrier wrote: On Tue, 17 Apr 2012, Lubomír Sedlář wrote: I would like to ask if any static analysis tool was ever used to detect possible problems in OpenSSL source code. Is some tool used regularly? I tried running Clang Static Analyzer [1] on the source of O

Re: Static analysis?

2012-04-20 Thread Jean-Marc Desperrier
On Tue, 17 Apr 2012, Lubomír Sedlář wrote: I would like to ask if any static analysis tool was ever used to detect possible problems in OpenSSL source code. Is some tool used regularly? I tried running Clang Static Analyzer [1] on the source of OpenSSL. Julia Lawall a écrit : A few years ago,

RE: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-20 Thread Erik Tkal
Hi Steve, thank you very much, that fixed it! Erik Erik Tkal Juniper OAC/UAC/Pulse Development -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Thursday, April 19,

[openssl.org #2798] compilation of openssl-1.0.1a fails on my solaris-10 box

2012-04-20 Thread Friedrich Haubensak via RT
just tried to compile openssl-1.0.1a on my solaris 10 box, using studio 12.1 compiler, but after ./Configure solaris-sparcv9-cc shared compilation of openssl-1.0.1a fails (openssl-1.0.1 went ok): linking of openssl fails with the error: Undefined symbol OPENSSL_ia32cap_P first referenced in

[openssl.org #2797] 1.0.1a build failure on OS X

2012-04-20 Thread Brian Wellington via RT
I just tried building 1.0.1a on OS X (Lion, if it matters), and it failed with: Undefined symbols for architecture x86_64: "_rc4_md5_enc", referenced from: _rc4_hmac_md5_cipher in libcrypto.a(e_rc4_hmac_md5.o) ld: symbol(s) not found for architecture x86_64 Looking through the CVS logs, I

[openssl.org #2796] fix for build problems with openssl 1.0.1a

2012-04-20 Thread Leena Heino via RT
Hi, Attached is a patch that fixes OpenSSL 1.0.1a build problems on a non x86 platform (Sparc). -- Leena Heino University of Tampere / Computer Centre ( liinu at uta.fi ) ( http://www.uta.fi/laitokset/tkk ) diff -Naur openssl-1.0.1a.orig/crypto/evp/e_rc4_hmac_md5.c open

[openssl.org #2795] openssl-1.0.1a - undefined symbol: OPENSSL_ia32cap_P with ultrasparc cpus (solution inside)

2012-04-20 Thread Daniel Flinkmann via RT
Hi, i got following error, when building the new openssl-1.0.1a package on a Sun Solaris 10 operation system with an UltraSPARC cpu: make[3]: Entering directory `/home/df/openssl-1.0.1a' [ -z "" ] || /opt/sunstudio/bin/cc -KPIC -DOPENSSL_PIC -DZLIB_SHARED -DZLIB -DOPENSSL_THREADS -D_REENTRANT -

Re: [openssl.org #2794] [PATCH] Remove branch hint to improve crypto algorithms performance on Power

2012-04-20 Thread Ashley via RT
The alignments of the performance results I did before sending it out did not come out right, my apologies. Please find my performance results spreadsheet attached. Regards, Ashley Lai On Wed, 2012-04-18 at 18:52 -0500, Ashley Lai wrote: > The not-taken branch hint in the assembly code causes p

[openssl.org #2794] [PATCH] Remove branch hint to improve crypto algorithms performance on Power

2012-04-20 Thread Ashley via RT
The not-taken branch hint in the assembly code causes performance degradation as the hardware always predict the specific branch that way. The branch hint is not necessary as the hardware prediction is very good and getting better. The patch attached removed the branch hint to let the hardware do

Re: Compile error with MinGW-w64

2012-04-20 Thread Jonathan Liu
On 16/04/2012 2:31 AM, Andy Polyakov wrote: What happens if you add "wait;" at the very end of crypto/asm/sha1-x86_64.pl? It just hangs. 'which perl'? If not /bin/perl, i.e. non-MSYS perl, then I'd suggest to complement MSYS installation with MSYS perl. It works with MSYS perl. Thanks. I wa

RE: OpenSSL Security Advisory

2012-04-20 Thread Murphy, Sandra
Also - any idea if BBN is using OpenSSL? --Sandy From: owner-openssl-...@openssl.org [owner-openssl-...@openssl.org] on behalf of OpenSSL [open...@master.openssl.org] Sent: Thursday, April 19, 2012 9:04 AM To: openssl-annou...@master.openssl.org; openssl-

1.0.1a build failure on OS X

2012-04-20 Thread Brian Wellington
I just tried building 1.0.1a on OS X (Lion, if it matters), and it failed with: Undefined symbols for architecture x86_64: "_rc4_md5_enc", referenced from: _rc4_hmac_md5_cipher in libcrypto.a(e_rc4_hmac_md5.o) ld: symbol(s) not found for architecture x86_64 Looking through the CVS logs,