Hello list,

I've compiled latest openssl manually to make it as valgrind-friendly as possible, using no-asm and -DPURIFY:

$ openssl version -a
OpenSSL 1.1.0-dev xx XXX xxxx
built on: Fri Mar 21 18:12:11 CET 2014
platform: linux-x86_64
options:  bn(64,64) rc4(ptr,int) des(idx,cisc,16,int) idea(int) blowfish(idx)
compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DPURIFY -g -O1 
-fno-omit-frame-pointer -fPIC -m64 -DL_ENDIAN -DTERMIO -Wall


However I'm getting tons of warnings like the following:

==3783== Conditional jump or move depends on uninitialised value(s)
==3783==    at 0x4F7C9F1: BN_bin2bn (bn_lib.c:621)
==3783==    by 0x4F7DFD8: bnrand (bn_rand.c:202)
==3783==    by 0x4F7E020: BN_rand (bn_rand.c:216)
==3783==    by 0x4F7E1BE: bn_rand_range (bn_rand.c:292)
==3783==    by 0x4F7E248: BN_rand_range (bn_rand.c:310)
==3783==    by 0x4FDC824: BN_BLINDING_create_param (bn_blind.c:346)
==3783==    by 0x4F8844D: RSA_setup_blinding (rsa_crpt.c:208)
==3783==    by 0x4FE8AF1: rsa_get_blinding (rsa_eay.c:290)
==3783==    by 0x4FE9A27: RSA_eay_private_encrypt (rsa_eay.c:440)
==3783==    by 0x4F881C7: RSA_private_encrypt (rsa_crpt.c:83)
==3783==    by 0x4F87B36: RSA_sign (rsa_sign.c:133)
==3783==    by 0x4FED999: pkey_rsa_sign (rsa_pmeth.c:218)

[...]

==3783== Conditional jump or move depends on uninitialised value(s)
==3783==    at 0x4F7CABB: BN_ucmp (bn_lib.c:657)
==3783==    by 0x4FDCE03: int_bn_mod_inverse (bn_gcd.c:558)
==3783==    by 0x4FDC842: BN_BLINDING_create_param (bn_blind.c:347)
==3783==    by 0x4F8844D: RSA_setup_blinding (rsa_crpt.c:208)
==3783==    by 0x4FE8AF1: rsa_get_blinding (rsa_eay.c:290)
==3783==    by 0x4FE9A27: RSA_eay_private_encrypt (rsa_eay.c:440)
==3783==    by 0x4F881C7: RSA_private_encrypt (rsa_crpt.c:83)
==3783==    by 0x4F87B36: RSA_sign (rsa_sign.c:133)
==3783==    by 0x4FED999: pkey_rsa_sign (rsa_pmeth.c:218)
==3783==    by 0x4F9B985: EVP_PKEY_sign (pmeth_fn.c:116)
==3783==    by 0x4F9C92C: EVP_DigestSignFinal (m_sigver.c:188)
==3783==    by 0x4FFC339: ASN1_item_sign_ctx (a_sign.c:311)



Any ideas?

Thanks in advance,
Dimitris




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to