"crytest v" hangs up

[alekcey]

Hi all.

I am trying to build cryptopp in Fedora 12.
But 'cryptest v' hangs up after "SHA-256 validation suite running..."

Here build logs:
http://koji.fedoraproject.org/koji/getfile?taskID=1810819&name=build.log

Here installed programs in build root:
http://koji.fedoraproject.org/koji/getfile?taskID=1810819&name=root.log

In Fedora 11 this test works without problems.

How can I fix this?

[Jeffrey Walton]

Hi alekcey,

Fetch the latest build from SVN
(http://svn.sourceforge.net/svnroot/cryptopp,
http://svn.sourceforge.net/viewvc/cryptopp/). Drill into /Trunk/c5.

I believe build 470 had a SHA-2 fix.

Jeff

[alekcey]

Hi Jeff,

I have applied changes from r479 but "crytest v" still hangs up in
i686 build
http://koji.fedoraproject.org/koji/getfile?taskID=1811480&name=build.log

and crashes in x86_64 build
http://koji.fedoraproject.org/koji/getfile?taskID=1811479&name=build.log

On Nov 17, 6:39 am, Jeffrey Walton <noloa...@gmail.com> wrote:
> Hi alekcey,
>
> Fetch the latest build from SVN

> (http://svn.sourceforge.net/svnroot/cryptopp,http://svn.sourceforge.net/viewvc/cryptopp/). Drill into /Trunk/c5.

>
> I believe build 470 had a SHA-2 fix.
>
> Jeff
>

[alekcey]

Finally I have found the reason why cryptest crashes.
There was in cryptopp 5.6.0 patented code mars which was removed from
Fedora
and I was trying to build svn r479 without mars too.
When I have build with mars cryptest not crashes and not hangs up any
more.

Is there any legal issues to not include mars code in Fedora after is
was
moved to public domain?

[Jeffrey Walton]

Hi alekcey,

> When I have build with mars cryptest not crashes and
> not hangs up any more.

Interesting. It appeared as though the dumped occured at SHA-224. My
apologies for leading you down a rabbit hole.

> Is there any legal issues to not include mars code in Fedora after is
> was moved to public domain?

I don't believe so. Perhaps someone with more experience can help out here.

According to [1], MARS is now in public domain. I believe there was a
misunderstanding in the past - it was believed that MARS was
encumbered so it was [incorrectly] removed by distributions. There was
a small discussion on the Crypto++ mailing list regarding
Fedora/Crypto++/Mars in June, 2009 [2].

Jeff

[1] http://domino.research.ibm.com/comm/research_projects.nsf/pages/security.mars.html
[2] http://groups.google.com/group/cryptopp-users/browse_thread/thread/8d3ba304e52746e3/b599ed800e26ffde

> [SNIP]

[alekcey]

Unfortunately with new build cryptest crashes again in Fedora 12
x86_64 and hangs up in i686.
In Fedora 11 this problem not exist.
I don't know why other build crashes again.
http://koji.fedoraproject.org/koji/getfile?taskID=1831344&name=build.log

I have build test.cpp with this code:

$ cat test.cpp
#include "sha.h"

int main(void)
{
byte digest[CryptoPP::SHA224::DIGESTSIZE];
CryptoPP::SHA224 hash;
hash.CalculateDigest(digest, (byte*)"aaa", 3);
}

Here backtrace:

http://nucleo.fedorapeople.org/test-crash.txt

On Nov 26, 4:04 am, Jeffrey Walton <noloa...@gmail.com> wrote:
> Hi alekcey,
>
> > When I have build with mars cryptest not crashes and
> > not hangs up any more.
>
> Interesting. It appeared as though the dumped occured at SHA-224. My
> apologies for leading you down a rabbit hole.
>
> > Is there any legal issues to not include mars code in Fedora after is
> > was moved to public domain?
>
> I don't believe so. Perhaps someone with more experience can help out here.
>
> According to [1], MARS is now in public domain. I believe there was a
> misunderstanding in the past - it was believed that MARS was
> encumbered so it was [incorrectly] removed by distributions. There was
> a small discussion on the Crypto++ mailing list regarding
> Fedora/Crypto++/Mars in June, 2009 [2].
>
> Jeff
>

> [1]http://domino.research.ibm.com/comm/research_projects.nsf/pages/secur...
> [2]http://groups.google.com/group/cryptopp-users/browse_thread/thread/8d...

[alekcey]

Broken code is produced only in rawhide Fedora version (fc13), but in
Fedora 12 (fc12) cryptopp not crashes.

There are build logs for Fedora 12 x86_64
http://nucleo.fedorapeople.org/cryptopp-build-fc12.log
http://nucleo.fedorapeople.org/cryptopp-root-fc12.log

and for Fedora 13 (rawhide) x86_64 (cryptest crashes on SHA-256 test)
http://nucleo.fedorapeople.org/cryptopp-build-fc13.log
http://nucleo.fedorapeople.org/cryptopp-root-fc13.log

The same optimizations are used in fc12 and fc13 builds.
But versions of some libs are different (installed libs are listed in
root.log).

[alekcey]

The main difference that I can see between Fedora 12 and Fedora 13 is
glibc 2.11 in fc12 and 2.11.90 in fc13.
I have tried to remove all optimizations, build only with "-O2" but it
changes nothing.

If this problem will be not solved cryptopp package will be removed
from Fedora and may be other packages that depends on cryptopp.

On Nov 26, 1:58 pm, alekcey <alekc...@googlemail.com> wrote:
> Broken code is produced only in rawhide Fedora version (fc13), but in
> Fedora 12 (fc12) cryptopp not crashes.
>

> There are build logs for Fedora 12 x86_64http://nucleo.fedorapeople.org/cryptopp-build-fc12.loghttp://nucleo.fedorapeople.org/cryptopp-root-fc12.log
>
> and for Fedora 13 (rawhide) x86_64 (cryptest crashes on SHA-256 test)http://nucleo.fedorapeople.org/cryptopp-build-fc13.loghttp://nucleo.fedorapeople.org/cryptopp-root-fc13.log

[Zooko O'Whielacronx]

I accidentally sent this just to alekcejk instead of to the list:

What version(s) of GNU assembler? Perhaps you've encountered this issue:

http://sourceware.org/bugzilla/show_bug.cgi?id=10856

https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/461303

He replied that this was probably the issue.

I'm interested because I want to get Tahoe-LAFS into Fedora and
Tahoe-LAFS depends on pycryptopp which depends on Crypto++. (Which,
as it turns out, depends on GNU as.)

Regards,

Zooko

[alekcey]

There is binutils 2.20.51.0.2 in Fedora 13
and 2.19.51.0.14 in Fedora 12.

So looks like it is the same issue.

I have filled bug https://bugzilla.redhat.com/show_bug.cgi?id=544358

Thank you.

Alexey

[alekcey]

Problem with test failure in cryptopp in Fedora rawhide was solved
with binutils 2.20.51.0.2-9.fc13.