From nmav at gnutls.org Wed Feb 1 00:24:43 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Wed, 01 Feb 2012 00:24:43 +0100 Subject: Tests and TCP ports In-Reply-To: <87d39zhm6x.fsf@gnu.org> References: <87d39zhm6x.fsf@gnu.org> Message-ID: <4F28783B.2080002@gnutls.org> On 01/31/2012 05:27 PM, Ludovic Court?s wrote: > Hello, > Some of the tests work by connecting to localhost on some TCP port, > and then exchanging over that connection. These tests typically fail > when the port cannot be listened, like: make[3]: Entering directory > `/tmp/nix-build-1i4rvwc1v6vky76vplykl9z3qz220zlz-gnutls-3.0.11.drv-0/gnutls-3.0.11/tests/dsa' > Checking various DSA key sizes Checking DSA-1024 with TLS 1.0 *** > Fatal error: A TLS fatal alert has been received. *** Handshake has > failed GnuTLS error: A TLS fatal alert has been received. Failure: > Failed connection to a server with DSA 1024 key and TLS 1.0! FAIL: > testdsa This is particularly a problem on Hydra where several builds > may be running in parallel, and trying to access the same TCP port. Hello Ludo, This is an open issue indeed. It has been low on priority though because it is a one-time-off check, so it could be assumed to run in a controlled environment. I don't plan to work on it but if there are patches for that I'd be glad to accept. > Possible solutions include: > - Using Unix domain sockets, though the path name limitation doesn?t > play well with the long $builddir that Nix uses (as above.) The sockets could be made relative to the directory, thus such a limitation might not be a problem. > - Trying several port numbers until one succeeds, the difficulty > being that the port number has to be communicated to the child > somehow. I don't really like that. > - Avoiding sockets entirely, by using ?gnutls_transport_set_ptr? & > co. This doesn?t help for tests written as shell scripts, though. > (Perhaps these could be translated in Guile, which makes writing > tests easy while not compromising on expressive power.) I've thought of moving the tests in a higher level language quite few times. Guile(with scheme) could have been a candidate but I have given up any attempt learning scheme or lisp. If guile supports lua at some point, or I if I learn scheme, I'd reconsider. Btw. If guile adds support for lua, would the binding for gnutls work, or it would be a totally different story? regards, Nikos From nmav at gnutls.org Wed Feb 1 00:37:02 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Wed, 01 Feb 2012 00:37:02 +0100 Subject: rfc: verify-ssh In-Reply-To: <4F2807A0.1050705@fifthhorseman.net> References: <4F23F386.8010308@gnutls.org> <4F2807A0.1050705@fifthhorseman.net> Message-ID: <4F287B1E.5070409@gnutls.org> On 01/31/2012 04:24 PM, Daniel Kahn Gillmor wrote: > On 01/28/2012 08:09 AM, Nikos Mavrogiannopoulos wrote: >> Hello, >> I've added two new functions gnutls_verify_stored_pubkey() and >> gnutls_store_pubkey() [0], that allow for an SSH-style authentication. >> That is they allow to trust public keys from certificates associated >> with a hostname and a service, based on whether they have been seen before. >> This by itself is not really much, but using it in a hybrid model where >> certificates are verified using the trusted certificate list _and_ the >> known public keys, it would increase security overall, as a compromise >> of a CA would not be enough to perform man-in-the-middle. Hello Daniel! > sounds like this is potentially a good toolkit for implementing public > key pinning, which is currently being discussed on websec: > https://datatracker.ietf.org/doc/draft-ietf-websec-key-pinning/ > Is this the intent? If so, should we consider including expiration > dates in the format in question, or having a way to store a digest in > place of the raw pubkey, if we haven't seen the pubkey itself yet? This wasn't the intent, but being able to support pinning (which looks like a similar idea) would be nice. Storing hashes though, I don't think it is a good idea. Why would one trust a hash and not the actual public key? If he trusts the hash he could use it to verify the public key and then store it. The issue with hashes is that they might break (e.g. if collisions are found) and replacing stored hashes is a mess, thus I'd try to avoid them (are they really required for pinning?). What I am skeptical of pinning is that it allows the server to modify the expiration of the pinning at will. > Can you explain the difference between the intended use of "application" > and "service" parameters in gnutls_store_pubkey, find_stored_pubkey, and > gnutls_verify_stored_pubkey ? If an application wants to store keys that are specific for that one it could specify an application string. The service I use it currently to specify the port number of the service connecting to. > The linear file storage mechanism probably won't scale well for > implementations that deal with many many such keys over time (e.g. a web > browser). Any thoughts about how to offer such a mechanism in a way > that scales better? I was thinking about it, but it seems it is very simple to implement an alternative approach with a different backend. Thus I am not really sure if a generic approach would be better, or it would provide a complex interface that would be hard to use. regards, Nikos From dkg at fifthhorseman.net Wed Feb 1 01:32:37 2012 From: dkg at fifthhorseman.net (Daniel Kahn Gillmor) Date: Tue, 31 Jan 2012 19:32:37 -0500 Subject: rfc: verify-ssh In-Reply-To: <4F287B1E.5070409@gnutls.org> References: <4F23F386.8010308@gnutls.org> <4F2807A0.1050705@fifthhorseman.net> <4F287B1E.5070409@gnutls.org> Message-ID: <4F288825.4080903@fifthhorseman.net> Hi Nikos-- On 01/31/2012 06:37 PM, Nikos Mavrogiannopoulos wrote: > This wasn't the intent, but being able to support pinning (which looks > like a similar idea) would be nice. yes, indeed. perhaps verify-ssh.c is a misleading title for this approach? What you're enabling here isn't specifically for ssh. it can be used to implement a TOFU (trust on first use) scheme, an out-of-band key distribution scheme, etc. > Storing hashes though, I don't think > it is a good idea. Why would one trust a hash and not the actual public > key? If he trusts the hash he could use it to verify the public key and > then store it. The issue with hashes is that they might break (e.g. if > collisions are found) and replacing stored hashes is a mess, thus I'd > try to avoid them (are they really required for pinning?). the idea behind identifying keys by their digest instead of the public key material is that you can pin your site to two keys (one active, one that you keep as an offline backup). If your hardware dies and you lose access to your active key (or if you worry the old key may have been compromised), you can re-deploy with your backup immediately, without waiting for the pin to expire. until we all move to ECDSA keys, shipping two full 2048-bit RSA public keys in the header was probably considered a bit too much; hence using the digest. So, in particular, storing a digest would be useful for a pinning implementation; it would enable the use of verify_stored_pubkey(), though obviously find_stored_pubkey wouldn't be possible. > What I am skeptical of pinning is that it allows the server to modify > the expiration of the pinning at will. yep, there's a bit of a race condition during a compromise; but it only affects users connecting to that service > If an application wants to store keys that are specific for that one it > could specify an application string. The service I use it currently to > specify the port number of the service connecting to. ah, i got it: "application" is the tool using gnutls, while "service" is the network service it is connecting to. in Monkeysphere, we haven't bothered with the "application" distinction (on the basis that different applications that have entirely distinct requirements will want to use an entirely separate key databse from each other, while most services offered by a host will just use the common system database), and our equivalent of your "service" is called "context", which is more flexibly-defined (and human-visible) than just the port number (e.g. "https" or "ssh" or "e-mail"). This allows the keyfinding operation to work for more than just network service keys; it could work for signed or encrypted e-mail messages, IM conversations, etc as well. What do you think the tradeoffs are between these approaches? > I was thinking about it, but it seems it is very simple to implement an > alternative approach with a different backend. Thus I am not really sure > if a generic approach would be better, or it would provide a complex > interface that would be hard to use. I like the general outline of the interface you've defined; my main concern is the backend storage. why do you think that a more efficient backend-storage mechanism would require a different interface? --dkg -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 1030 bytes Desc: OpenPGP digital signature URL: From nmav at gnutls.org Wed Feb 1 13:18:06 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Wed, 1 Feb 2012 13:18:06 +0100 Subject: rfc: verify-ssh In-Reply-To: <4F288825.4080903@fifthhorseman.net> References: <4F23F386.8010308@gnutls.org> <4F2807A0.1050705@fifthhorseman.net> <4F287B1E.5070409@gnutls.org> <4F288825.4080903@fifthhorseman.net> Message-ID: On Wed, Feb 1, 2012 at 1:32 AM, Daniel Kahn Gillmor wrote: > Hi Nikos-- > On 01/31/2012 06:37 PM, Nikos Mavrogiannopoulos wrote: >> This wasn't the intent, but being able to support pinning (which looks >> like a similar idea) would be nice. > yes, indeed. ?perhaps verify-ssh.c is a misleading title for this > approach? ?What you're enabling here isn't specifically for ssh. ?it can > be used to implement a TOFU (trust on first use) scheme, an out-of-band > key distribution scheme, etc. Yes. I couldn't figure out a better name though. Is TOFU used as term? >> Storing hashes though, I don't think >> it is a good idea. Why would one trust a hash and not the actual public >> key? If he trusts the hash he could use it to verify the public key and >> then store it. The issue with hashes is that they might break (e.g. if >> collisions are found) and replacing stored hashes is a mess, thus I'd >> try to avoid them (are they really required for pinning?). > the idea behind identifying keys by their digest instead of the public > key material is that you can pin your site to two keys (one active, one > that you keep as an offline backup). ?If your hardware dies and you lose > access to your active key (or if you worry the old key may have been > compromised), you can re-deploy with your backup immediately, without > waiting for the pin to expire. > until we all move to ECDSA keys, shipping two full 2048-bit RSA public > keys in the header was probably considered a bit too much; ?hence using > the digest. > So, in particular, storing a digest would be useful for a pinning > implementation; it would enable the use of verify_stored_pubkey(), > though obviously find_stored_pubkey wouldn't be possible. Ok then it might make sense to support storing hashes. It might be on a different file though to keep things simple. >> If an application wants to store keys that are specific for that one it >> could specify an application string. The service I use it currently to >> specify the port number of the service connecting to. > > ah, i got it: "application" is the tool using gnutls, while "service" is > the network service it is connecting to. > in Monkeysphere, we haven't bothered with the "application" distinction > (on the basis that different applications that have entirely distinct > requirements will want to use an entirely separate key databse from each > other, while most services offered by a host will just use the common > system database), and our equivalent of your "service" ?is called > "context", which is more flexibly-defined (and human-visible) than just > the port number (e.g. "https" or "ssh" or "e-mail"). ?This allows the > keyfinding operation to work for more than just network service keys; it > could work for signed or encrypted e-mail messages, IM conversations, > etc as well. > What do you think the tradeoffs are between these approaches? Do you mean something like passing the output of getservbyport()? (or services(5) entries). That is a good idea. >> I was thinking about it, but it seems it is very simple to implement an >> alternative approach with a different backend. Thus I am not really sure >> if a generic approach would be better, or it would provide a complex >> interface that would be hard to use. > I like the general outline of the interface you've defined; my main > concern is the backend storage. ?why do you think that a more efficient > backend-storage mechanism would require a different interface? No, actually this is not what I thought. It thought you were suggesting to have an extensible interface for developers to plug their back-end. An efficient backend such as a database engine would involve an extra library dependency, which I'd like to avoid, and the text-based approach has the advantage of being easy to edit without the need of a tool. Maybe having a hybrid solution of having a default (linearly searched) file, and allowing for an alternative back-end be a more generic solution. Or do you have something else/better in mind? regards, Nikos From s_buckhe at cs.uni-kl.de Fri Feb 3 00:03:10 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Fri, 03 Feb 2012 00:03:10 +0100 Subject: DTLS retransmission timeouts Message-ID: <4F2B162E.6010008@cs.uni-kl.de> Hello, looking at the DTLS retransmission code in the nonblocking path, I find if (now-session->internals.dtls.handshake_start_time < session->internals.dtls.actual_retrans_timeout) in gnutls_dtls.c _dtls_transmit. So it waits for actual_retrans_timeout seconds to retransmit, but actual_retrans_timeout looks like a millisecond timespan. Am I missing something, or is this line missing a division by 1000? -- Sean From danw at gnome.org Fri Feb 3 15:57:34 2012 From: danw at gnome.org (Dan Winship) Date: Fri, 03 Feb 2012 09:57:34 -0500 Subject: cert retrieve function problems in 3.0.x Message-ID: <4F2BF5DE.7070909@gnome.org> 1) Calling gnutls_certificate_set_retrieve_function() on a server-side credential doesn't work in 3.0.x (because lib/auth/cert.c mistakenly checks if cred->server_get_cert_callback is set twice and doesn't check if cred->get_cert_callback is set at all) 2) gnutls_certificate_set_retrieve_function2() is missing from the generated docs. 3) The docs for gnutls_certificate_set_retrieve_function2() in the source tree give an incorrect prototype for the callback function. (It ends with "gnutls_pcert_st *", but should end with "gnutls_pcert_st **, unsigned int *pcert_length, gnutls_privkey_t *".) -- Dan From s_buckhe at cs.uni-kl.de Fri Feb 3 18:50:39 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Fri, 03 Feb 2012 18:50:39 +0100 Subject: DTLS retransmission timeouts In-Reply-To: <4F2B162E.6010008@cs.uni-kl.de> References: <4F2B162E.6010008@cs.uni-kl.de> Message-ID: <4F2C1E6F.7080708@cs.uni-kl.de> > Am I missing something, or is this line missing a > division by 1000? Looking at it again today and testing the whole thing, there is a division missing. DLTS in nonblocking mode will never retransmit a handshake packet, setting the retransmit timeout to 1 manually will cause it to work as expected. From dmarlin at redhat.com Fri Feb 3 14:56:11 2012 From: dmarlin at redhat.com (David A. Marlin) Date: Fri, 03 Feb 2012 07:56:11 -0600 Subject: test failure when building gnutls-2.12.14 for ARM Message-ID: <4F2BE77B.4030604@redhat.com> When building gnutls-2.12.14 on Fedora rawhide for ARM. Using versions: gcc-4.7.0 glibc-2.15 guile-1.8.8 three tests fail during 'make check': ------------------------------------- Making check in tests make[2]: Entering directory `/builddir/build/BUILD/gnutls-2.12.14/guile/tests' make check-TESTS make[3]: Entering directory `/builddir/build/BUILD/gnutls-2.12.14/guile/tests' PASS: anonymous-auth.scm /bin/sh: line 5: 11417 Segmentation fault GUILE_AUTO_COMPILE=0 ../../guile/pre-inst-guile -L . ${dir}$tst FAIL: session-record-port.scm PASS: pkcs-import-export.scm PASS: errors.scm PASS: x509-certificates.scm /bin/sh: line 5: 11463 Segmentation fault GUILE_AUTO_COMPILE=0 ../../guile/pre-inst-guile -L . ${dir}$tst FAIL: x509-auth.scm PASS: openpgp-keys.scm PASS: openpgp-keyring.scm /bin/sh: line 5: 11499 Segmentation fault GUILE_AUTO_COMPILE=0 ../../guile/pre-inst-guile -L . ${dir}$tst FAIL: openpgp-auth.scm =================================== 3 of 9 tests failed Please report to bug-gnutls at gnu.org =================================== ------------------------------------- This appears to be caused by a difference in the size of off_t in the following structure: /usr/include/libguile/ports.h ------------------------------------- typedef struct { SCM port; long int entry; int revealed; scm_t_bits stream; SCM file_name; long int line_number; int column_number; unsigned char *read_buf; const unsigned char *read_pos; unsigned char *read_end; off_t read_buf_size; unsigned char *saved_read_buf; const unsigned char *saved_read_pos; unsigned char *saved_read_end; off_t saved_read_buf_size; unsigned char *write_buf; unsigned char *write_pos; unsigned char *write_end; off_t write_buf_size; unsigned char shortbuf; int rw_random; scm_t_port_rw_active rw_active; unsigned char *putback_buf; size_t putback_buf_size; } scm_t_port; ------------------------------------- In gnutls off_t is 'long long int', but in guile off_t is 'long int'. This is because gnutls has: #define _FILE_OFFSET_BITS 64 and guile has no such definition. By building guile with -D_FILE_OFFSET_BITS=64, the gnutls test completed successfully. Conversely, using the original guile build and rebuilding gnutls with '--disable-largefile' in the configure command also allows the gnutls test completed successfully. Please let me know the correct solution to this issue, of if you need any additional information. Thank you, d.marlin From rj7252 at att.com Fri Feb 3 04:35:40 2012 From: rj7252 at att.com (JONES, BILL) Date: Fri, 3 Feb 2012 03:35:40 +0000 Subject: BUG Report: gnutls-3.0.9 Solaris 10 64bit Message-ID: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com> All, I am compiling gnutls-3.0.9 on Solaris 10 64bit and get the following errors. Please advise. Robert W. Jones (Bill) PMTS configure: summary of build options: version: 3.0.9 shared 32:0:4 Host type: sparc-sun-solaris2.10 Install prefix: /appl/gfpip/local Compiler: gcc -std=gnu99 CFlags: -m64 -I/appl/gfpip/local/include -I/usr/local/include Warning flags: errors: warnings: Library types: Shared=yes, Static=yes Valgrind: no Guile wrappers: no C++ library: no OpenSSL compat: yes /dev/crypto: no Hardware accel: none Crypto library: nettle PKCS#11 support: no crywrap app: yes Making all in crywrap make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/crywrap' CC crywrap.o /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c: In function `_crywrap_parse_ip': /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c:353: warning: implicit declaration of function `strndup' /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c:353: warning: assignment makes pointer from integer without a cast /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c: In function `_crywrap_do_one': /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c:867: warning: cast to pointer from integer of different size /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c:868: warning: cast to pointer from integer of different size /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c: In function `main': /appl/archives/build_tools/tools/src/gnutls-3.0.9/src/crywrap/crywrap.c:1024: warning: implicit declaration of function `daemon' CCLD crywrap Undefined first referenced symbol in file daemon crywrap.o ld: fatal: Symbol referencing errors. No output written to .libs/crywrap collect2: ld returned 1 exit status make[3]: *** [crywrap] Error 1 make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/crywrap' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9' make: *** [all] Error 2 MY script that builds the package, does the make check anyway with these results: make check-TESTS make[6]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl/tests' PASS: test-accept PASS: test-alloca-opt PASS: test-argp No differences encountered No differences encountered No differences encountered PASS: test-argp-2.sh PASS: test-arpa_inet PASS: test-binary-io.sh PASS: test-bind PASS: test-byteswap PASS: test-c-ctype PASS: test-close PASS: test-connect PASS: test-dirent PASS: test-dup2 PASS: test-environ PASS: test-errno PASS: test-fcntl-h PASS: test-fdopen PASS: test-fgetc PASS: test-float PASS: test-fputc PASS: test-fread PASS: test-frexp-nolibm PASS: test-frexpl-nolibm PASS: test-fseek.sh PASS: test-fseek2.sh PASS: test-fseeko.sh PASS: test-fseeko2.sh PASS: test-fseeko3.sh PASS: test-fseeko4.sh PASS: test-fseterr PASS: test-fstat PASS: test-ftell.sh PASS: test-ftell2.sh PASS: test-ftell3 PASS: test-ftello.sh PASS: test-ftello2.sh PASS: test-ftello3 PASS: test-ftello4.sh PASS: test-ftruncate.sh PASS: test-func PASS: test-fwrite PASS: test-getcwd-lgpl PASS: test-getdelim PASS: test-getline PASS: test-getopt PASS: test-getpeername PASS: test-gettimeofday PASS: test-ignore-value PASS: test-inet_ntop PASS: test-inet_pton PASS: test-intprops PASS: test-inttypes PASS: test-ioctl PASS: test-isnand-nolibm PASS: test-isnanf-nolibm PASS: test-isnanl-nolibm PASS: test-listen Starting test_lock ... OK Starting test_rwlock ... OK Starting test_recursive_lock ... OK Starting test_once ... OK PASS: test-lock PASS: test-lstat PASS: test-malloc-gnu PASS: test-malloca PASS: test-math PASS: test-memchr PASS: test-netdb PASS: test-netinet_in PASS: test-open PASS: test-pathmax PASS: test-perror.sh PASS: test-perror2 PASS: test-pipe PASS: test-printf-frexp PASS: test-printf-frexpl PASS: test-rawmemchr PASS: test-read-file PASS: test-recv PASS: test-recvfrom Invalid fd test... passed Unconnected socket test... passed Connected sockets test... passed General socket test with fork... passed Pipe test... passed PASS: test-select PASS: test-select-in.sh PASS: test-select-out.sh PASS: test-send PASS: test-sendto PASS: test-setenv PASS: test-setsockopt PASS: test-shutdown PASS: test-signal-h PASS: test-signbit PASS: test-sleep PASS: test-snprintf PASS: test-sockets PASS: test-stat PASS: test-stdalign PASS: test-stdbool PASS: test-stddef PASS: test-stdint PASS: test-stdio PASS: test-stdlib PASS: test-strchrnul PASS: test-strerror PASS: test-strerror_r PASS: test-string PASS: test-strings PASS: test-strnlen PASS: test-strverscmp PASS: test-symlink PASS: test-sys_ioctl PASS: test-sys_select PASS: test-sys_socket PASS: test-sys_stat PASS: test-sys_time PASS: test-sys_types PASS: test-sys_uio PASS: test-sysexits PASS: test-thread_self PASS: test-thread_create PASS: test-time PASS: test-u64 PASS: test-unistd PASS: test-unsetenv PASS: test-vasnprintf PASS: test-vasprintf test-vc-list-files-git.sh: skipped test: git not found in PATH SKIP: test-vc-list-files-git.sh test-vc-list-files-cvs.sh: skipped test: cvs not found in PATH SKIP: test-vc-list-files-cvs.sh PASS: test-verify PASS: test-verify.sh No differences encountered PASS: test-version-etc.sh PASS: test-vfprintf-posix.sh PASS: test-vprintf-posix.sh PASS: test-vsnprintf PASS: test-wchar ====================== All 127 tests passed (2 tests were not run) ====================== make[6]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl/tests' make[5]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl/tests' make[4]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl/tests' make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl/tests' make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl' make[3]: Nothing to be done for `check-am'. make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl' make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl' make[1]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/gl' Making check in lib make[1]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib' Making check in includes make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/includes' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/includes' Making check in x509 make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/x509' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/x509' Making check in accelerated make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/accelerated' make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/accelerated' make[3]: Nothing to be done for `check-am'. make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/accelerated' make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/accelerated' Making check in auth make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/auth' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/auth' Making check in ext make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/ext' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/ext' Making check in algorithms make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/algorithms' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/algorithms' Making check in opencdk make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/opencdk' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/opencdk' Making check in openpgp make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/openpgp' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/openpgp' Making check in nettle make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/nettle' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib/nettle' make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib' make[2]: Nothing to be done for `check-am'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib' make[1]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/lib' Making check in extra make[1]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/extra' Making check in includes make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/extra/includes' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/extra/includes' make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/extra' make[2]: Nothing to be done for `check-am'. make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/extra' make[1]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/extra' Making check in po make[1]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/po' make[1]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/po' Making check in src make[1]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src' Making check in cfg make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg' Making check in platon make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg/platon' Making check in str make[4]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg/platon/str' make[4]: Nothing to be done for `check'. make[4]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg/platon/str' make[4]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg/platon' make[4]: Nothing to be done for `check-am'. make[4]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg/platon' make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg/platon' make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg' make[3]: Nothing to be done for `check-am'. make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg' make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/cfg' Making check in crywrap make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/crywrap' CCLD crywrap Undefined first referenced symbol in file daemon crywrap.o ld: fatal: Symbol referencing errors. No output written to .libs/crywrap collect2: ld returned 1 exit status make[2]: *** [crywrap] Error 1 make[2]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src/crywrap' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/src' make: *** [check-recursive] Error 1 From eliz at gnu.org Sat Feb 4 08:13:54 2012 From: eliz at gnu.org (Eli Zaretskii) Date: Sat, 04 Feb 2012 09:13:54 +0200 Subject: BUG Report: gnutls-3.0.9 Solaris 10 64bit In-Reply-To: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com> References: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com> Message-ID: <83ehubdqa5.fsf@gnu.org> > From: "JONES, BILL" > Date: Fri, 3 Feb 2012 03:35:40 +0000 > > I am compiling gnutls-3.0.9 on Solaris 10 64bit and get the following errors. > > > > Please advise. My (unofficial) advice is to skip that program. crywrap is notoriously non-portable, full of tricks and functions that can be found and work nowhere but on Linux. It sounds like it was written with Linux only in mind. Until it has some serious portability fixes, my suggestion is to avoid building it altogether. It is not an essential part of GnuTLS, anyway. From ametzler at downhill.at.eu.org Sat Feb 4 08:36:33 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sat, 4 Feb 2012 08:36:33 +0100 Subject: test failure when building gnutls-2.12.14 for ARM In-Reply-To: <4F2BE77B.4030604@redhat.com> References: <4F2BE77B.4030604@redhat.com> Message-ID: <20120204073633.GA1974@downhill.g.la> On 2012-02-03 "David A. Marlin" wrote: > When building gnutls-2.12.14 on Fedora rawhide for ARM. > Using versions: > gcc-4.7.0 > glibc-2.15 > guile-1.8.8 > three tests fail during 'make check': > ------------------------------------- [...] I think this is the same issue: http://lists.gnu.org/archive/html/gnutls-devel/2011-10/msg00075.html Nikos had started a discussion on bug-gnulib http://news.gmane.org/find-root.php?message_id=%3c4EB83FEF.7030306%40gnutls.org%3e however I do not think any positive outcome was reached. cu andreas From rj7252 at att.com Sun Feb 5 14:48:12 2012 From: rj7252 at att.com (JONES, BILL) Date: Sun, 5 Feb 2012 13:48:12 +0000 Subject: BUG Report: gnutls-3.0.9 Solaris 10 64bit In-Reply-To: <83ehubdqa5.fsf@gnu.org> References: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com>, <83ehubdqa5.fsf@gnu.org> Message-ID: <2B72DD7087E4A24A895A948352DA2F92020B59C0@MISOUT7MSGUSR9A.ITServices.sbc.com> How can I disable it's build and testing in gnutls.. I don't see a flag in configure to do so. Bill ________________________________________ From: Eli Zaretskii [eliz at gnu.org] Sent: Saturday, February 04, 2012 2:13 AM To: JONES, BILL Cc: bug-gnutls at gnu.org Subject: Re: BUG Report: gnutls-3.0.9 Solaris 10 64bit > From: "JONES, BILL" > Date: Fri, 3 Feb 2012 03:35:40 +0000 > > I am compiling gnutls-3.0.9 on Solaris 10 64bit and get the following errors. > > > > Please advise. My (unofficial) advice is to skip that program. crywrap is notoriously non-portable, full of tricks and functions that can be found and work nowhere but on Linux. It sounds like it was written with Linux only in mind. Until it has some serious portability fixes, my suggestion is to avoid building it altogether. It is not an essential part of GnuTLS, anyway. From eliz at gnu.org Sun Feb 5 17:25:19 2012 From: eliz at gnu.org (Eli Zaretskii) Date: Sun, 05 Feb 2012 18:25:19 +0200 Subject: BUG Report: gnutls-3.0.9 Solaris 10 64bit In-Reply-To: <2B72DD7087E4A24A895A948352DA2F92020B59C0@MISOUT7MSGUSR9A.ITServices.sbc.com> References: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com> <83ehubdqa5.fsf@gnu.org> <2B72DD7087E4A24A895A948352DA2F92020B59C0@MISOUT7MSGUSR9A.ITServices.sbc.com> Message-ID: <83obtdcknk.fsf@gnu.org> > From: "JONES, BILL" > CC: "bug-gnutls at gnu.org" > Date: Sun, 5 Feb 2012 13:48:12 +0000 > Accept-Language: en-US > > How can I disable it's build and testing in gnutls.. I don't see a flag in configure to do so. "make -k" will continue the build even though the crywrap part fails. From s_buckhe at cs.uni-kl.de Mon Feb 6 15:14:11 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Mon, 06 Feb 2012 15:14:11 +0100 Subject: DTLS retransmission timeouts In-Reply-To: <4F2B162E.6010008@cs.uni-kl.de> References: <4F2B162E.6010008@cs.uni-kl.de> Message-ID: <4F2FE033.1080105@cs.uni-kl.de> > if (now-session->internals.dtls.handshake_start_time < > session->internals.dtls.actual_retrans_timeout) Trivial patch attached. Works fine to get DTLS to retransmit stuff in nonblocking mode. -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls-timeout.patch Type: text/x-patch Size: 626 bytes Desc: not available URL: From INVALID.NOREPLY at gnu.org Mon Feb 6 15:21:06 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Mon, 06 Feb 2012 14:21:06 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss Message-ID: <20120206-142105.sv0.46528@savannah.gnu.org> URL: Summary: DTLS handshake deadlocks on packet loss Project: GnuTLS Submitted by: None Submitted on: Mon 06 Feb 2012 02:21:05 PM UTC Category: Core library Priority: 5 - Normal Severity: 3 - Normal Status: None Privacy: Public Assigned to: None Originator Email: s_buckhe at cs.uni-kl.de Open/Closed: Open Discussion Lock: Any Operating System: GNU/Linux _______________________________________________________ Details: When packets in the middle of any handshake flight are lost, DTLS handshake fails in two situations: * in blocking mode, handshake simply deadlocks and despite all timeouts, no progress is made. * in nonblocking mode, handshake continues as expected, but fails on completion with GNUTLS_E_UNEXPECTED_PACKET or through more obscure errors like GNUTLS_E_ERROR_IN_FINISHED_PACKET on client side. Given the rather low probability that packets are lost in exactly this manner, this bug does not seem severe. It is rather annoying though, as it leads to handshakes failing that should have succeeded. A testcase (rather lengthy) is attached. _______________________________________________________ File Attachments: ------------------------------------------------------- Date: Mon 06 Feb 2012 02:21:05 PM UTC Name: handshake.cpp Size: 4kB By: None _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From nmav at gnutls.org Mon Feb 6 20:08:54 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Mon, 06 Feb 2012 20:08:54 +0100 Subject: DTLS retransmission timeouts In-Reply-To: <4F2FE033.1080105@cs.uni-kl.de> References: <4F2B162E.6010008@cs.uni-kl.de> <4F2FE033.1080105@cs.uni-kl.de> Message-ID: <4F302546.10809@gnutls.org> On 02/06/2012 03:14 PM, Sean Buckheister wrote: >> if (now-session->internals.dtls.handshake_start_time < >> session->internals.dtls.actual_retrans_timeout) > > Trivial patch attached. Works fine to get DTLS to retransmit stuff in > nonblocking mode. Sorry for the late reply. I applied the patch which will be included in the next release. Thank you for tracing this. regards, Nikos From nmav at gnutls.org Mon Feb 6 20:25:22 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Mon, 06 Feb 2012 20:25:22 +0100 Subject: cert retrieve function problems in 3.0.x In-Reply-To: <4F2BF5DE.7070909@gnome.org> References: <4F2BF5DE.7070909@gnome.org> Message-ID: <4F302922.9020608@gnutls.org> On 02/03/2012 03:57 PM, Dan Winship wrote: > 1) Calling gnutls_certificate_set_retrieve_function() on a server-side > credential doesn't work in 3.0.x (because lib/auth/cert.c mistakenly > checks if cred->server_get_cert_callback is set twice and doesn't check > if cred->get_cert_callback is set at all) > > 2) gnutls_certificate_set_retrieve_function2() is missing from the > generated docs. > > 3) The docs for gnutls_certificate_set_retrieve_function2() in the > source tree give an incorrect prototype for the callback function. (It > ends with "gnutls_pcert_st *", but should end with "gnutls_pcert_st **, > unsigned int *pcert_length, gnutls_privkey_t *".) Thank you. I've tried to address all issues in the repository. regards, Nikos From ludo at gnu.org Tue Feb 7 00:43:12 2012 From: ludo at gnu.org (Ludovic =?iso-8859-1?Q?Court=E8s?=) Date: Tue, 07 Feb 2012 00:43:12 +0100 Subject: Tests and TCP ports In-Reply-To: <4F28783B.2080002@gnutls.org> (Nikos Mavrogiannopoulos's message of "Wed, 01 Feb 2012 00:24:43 +0100") References: <87d39zhm6x.fsf@gnu.org> <4F28783B.2080002@gnutls.org> Message-ID: <87pqdrle9b.fsf@gnu.org> Hi Nikos, Sorry for the late reply. Nikos Mavrogiannopoulos skribis: > On 01/31/2012 05:27 PM, Ludovic Court?s wrote: > >> Hello, >> Some of the tests work by connecting to localhost on some TCP port, >> and then exchanging over that connection. These tests typically fail >> when the port cannot be listened, like: make[3]: Entering directory >> `/tmp/nix-build-1i4rvwc1v6vky76vplykl9z3qz220zlz-gnutls-3.0.11.drv-0/gnutls-3.0.11/tests/dsa' > >> Checking various DSA key sizes Checking DSA-1024 with TLS 1.0 *** >> Fatal error: A TLS fatal alert has been received. *** Handshake has >> failed GnuTLS error: A TLS fatal alert has been received. Failure: >> Failed connection to a server with DSA 1024 key and TLS 1.0! FAIL: >> testdsa This is particularly a problem on Hydra where several builds >> may be running in parallel, and trying to access the same TCP port. [...] >> Possible solutions include: >> - Using Unix domain sockets, though the path name limitation doesn?t >> play well with the long $builddir that Nix uses (as above.) > > > The sockets could be made relative to the directory, thus such a > limitation might not be a problem. Yes. Actually, it?s even easier to use socket pairs, as currently done in guile/tests/*-auth.scm. > I've thought of moving the tests in a higher level language quite few > times. Guile(with scheme) could have been a candidate but I have given > up any attempt learning scheme or lisp. Oh well. I can only encourage you to look at (say) guile/tests/openpgp-auth.scm. Hopefully it?s fairly easy to understand, as it?s essentially a direct translation of the C code. I could rewrite ?testdsa? in Scheme but I guess it?d be pointless to do it myself. > Btw. If guile adds support for lua, would the binding for gnutls work, > or it would be a totally different story? Yes, but don?t hold your breath. Thanks, Ludo?. From zeranoe at gmail.com Tue Feb 7 06:08:40 2012 From: zeranoe at gmail.com (Kyle Schwarz) Date: Tue, 07 Feb 2012 00:08:40 -0500 Subject: undefined reference to `aes_gcm_struct' Message-ID: <4F30B1D8.4090409@gmail.com> I'm getting an undefined reference to aes_gcm_struct when trying to compile gnutls 3.0.12 for Win64. I'm using MinGW-w64. I had no problem compiling the 32-bit version. make[1]: Entering directory `/home/kyle/software/ffmpeg/packages/gnutls/build/src' /bin/bash ../libtool --tag=CC --mode=link x86_64-w64-mingw32-gcc -std=gnu99 -I/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/include -L/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/lib -o gnutls-serv.exe serv.o udp-serv.o common.o ../lib/libgnutls.la libcmd-serv.la ../gl/libgnu.la -lws2_32 -lws2_32 libtool: link: x86_64-w64-mingw32-gcc -std=gnu99 -I/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/include -o gnutls-serv.exe serv.o udp-serv.o common.o -L/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/lib ../lib/.libs/libgnutls.a -L/home/kyle/software/ffmpeg/packages/nettle/nettle-2.4-win64/lib -L/home/kyle/software/ffmpeg/packages/zlib/zlib-1.2.5-win64/lib -lnettle -lhogweed /home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/lib/libgmp.a -lz -lpthread ./.libs/libcmd-serv.a ../gl/.libs/libgnu.a -lws2_32 ../lib/.libs/libgnutls.a(aes-x86.o):aes-x86.c:(.text+0x594): undefined reference to `aes_gcm_struct' ../lib/.libs/libgnutls.a(aes-x86.o):aes-x86.c:(.text+0x5e4): undefined reference to `aes_gcm_struct' collect2: ld returned 1 exit status make[1]: *** [gnutls-serv.exe] Error 1 Any ideas? Best regards, Kyle Schwarz From nmav at gnutls.org Tue Feb 7 11:13:51 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Tue, 7 Feb 2012 11:13:51 +0100 Subject: undefined reference to `aes_gcm_struct' In-Reply-To: <4F30B1D8.4090409@gmail.com> References: <4F30B1D8.4090409@gmail.com> Message-ID: Hi, It seems aes-gcm-x86.c wasn't compiled in windows. If you have autotools would applying this patch fixes the issue for you? regards, Nikos On Tue, Feb 7, 2012 at 6:08 AM, Kyle Schwarz wrote: > I'm getting an undefined reference to aes_gcm_struct when trying to compile > gnutls 3.0.12 for Win64. I'm using MinGW-w64. I had no problem compiling the > 32-bit version. > > make[1]: Entering directory > `/home/kyle/software/ffmpeg/packages/gnutls/build/src' > /bin/bash ../libtool ?--tag=CC ? --mode=link x86_64-w64-mingw32-gcc > -std=gnu99 -I/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/include > -L/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/lib -o > gnutls-serv.exe serv.o udp-serv.o common.o ?../lib/libgnutls.la > libcmd-serv.la ../gl/libgnu.la ?-lws2_32 -lws2_32 > libtool: link: x86_64-w64-mingw32-gcc -std=gnu99 > -I/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/include -o > gnutls-serv.exe serv.o udp-serv.o common.o > -L/home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/lib > ../lib/.libs/libgnutls.a > -L/home/kyle/software/ffmpeg/packages/nettle/nettle-2.4-win64/lib > -L/home/kyle/software/ffmpeg/packages/zlib/zlib-1.2.5-win64/lib -lnettle > -lhogweed > /home/kyle/software/ffmpeg/packages/gmp/gmp-5.0.3-win64/lib/libgmp.a -lz > -lpthread ./.libs/libcmd-serv.a ../gl/.libs/libgnu.a -lws2_32 > ../lib/.libs/libgnutls.a(aes-x86.o):aes-x86.c:(.text+0x594): undefined > reference to `aes_gcm_struct' > ../lib/.libs/libgnutls.a(aes-x86.o):aes-x86.c:(.text+0x5e4): undefined > reference to `aes_gcm_struct' > collect2: ld returned 1 exit status > make[1]: *** [gnutls-serv.exe] Error 1 > > Any ideas? > > Best regards, > ?Kyle Schwarz > > _______________________________________________ > Gnutls-devel mailing list > Gnutls-devel at gnu.org > https://lists.gnu.org/mailman/listinfo/gnutls-devel -------------- next part -------------- diff --git a/lib/accelerated/x86/Makefile.am b/lib/accelerated/x86/Makefile.am index 4e2aa62..3ddd066 100644 --- a/lib/accelerated/x86/Makefile.am +++ b/lib/accelerated/x86/Makefile.am @@ -39,11 +39,12 @@ libx86_la_SOURCES = sha-padlock.c hmac-padlock.c aes-x86.c aes-padlock.c aes-gcm if ASM_X86_64 AM_CFLAGS += -DASM_X86_64 -DASM_X86 +libx86_la_SOURCES += aes-gcm-x86.c if WINDOWS libx86_la_SOURCES += asm-coff/appro-aes-x86-64-coff.s asm-coff/padlock-x86-64-coff.s asm-coff/cpuid-x86-64-coff.s asm-coff/appro-aes-gcm-x86-64-coff.s else -libx86_la_SOURCES += asm/appro-aes-x86-64.s asm/appro-aes-gcm-x86-64.s aes-gcm-x86.c asm/padlock-x86-64.s asm/cpuid-x86-64.s +libx86_la_SOURCES += asm/appro-aes-x86-64.s asm/appro-aes-gcm-x86-64.s asm/padlock-x86-64.s asm/cpuid-x86-64.s endif else From INVALID.NOREPLY at gnu.org Tue Feb 7 11:34:02 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Tue, 07 Feb 2012 10:34:02 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120206-142105.sv0.46528@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> Message-ID: <20120207-103401.sv0.1484@savannah.gnu.org> Follow-up Comment #1, sr #107948 (project gnutls): This shouldn't have happened. I'll check it out and let you know. --nmav _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From rj7252 at att.com Tue Feb 7 16:11:12 2012 From: rj7252 at att.com (JONES, BILL) Date: Tue, 7 Feb 2012 15:11:12 +0000 Subject: BUG Report: gnutls-3.0.9 Solaris 10 64bit In-Reply-To: <83obtdcknk.fsf@gnu.org> References: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com> <83ehubdqa5.fsf@gnu.org> <2B72DD7087E4A24A895A948352DA2F92020B59C0@MISOUT7MSGUSR9A.ITServices.sbc.com>, <83obtdcknk.fsf@gnu.org> Message-ID: <2B72DD7087E4A24A895A948352DA2F92020B7EB9@MISOUT7MSGUSR9A.ITServices.sbc.com> All, OK...so I figured out how to hack configure so it does not need CRYWRAP (it sets a variable to "#" based on the presence of libidn...very definitive.) And got past that....(and running make -k check ...just in case). Should I be worried about these few failures in the light of everything else passed. Thanks, Robert W. Jones (Bill) PMTS - AT&T Now the rest of the errors: NOTE: Unless I list it here, it passed. make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/pkcs1-padding' /appl/archives/build_tools/tools/src/gnutls-3.0.9/tests/pkcs1-padding/pkcs1-pad: datefudge: not found Cannot fake timestamps, please install datefudge... SKIP: pkcs1-pad make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/pkcs12-decode' make pkcs12 make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/pkcs12-decode' make[3]: Nothing to be done for `/appl/archives/build_tools/tools/src/gnutls-3.0.9/tests/pkcs12-decode/pkcs12'. make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/pkcs12-decode' make check-TESTS make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/pkcs12-decode' NEON PKCS12 OK client.p12 foobar NEON PKCS12 OK noclient.p12 NEON PKCS12 OK unclient.p12 Segmentation Fault - core dumped Type: Encrypted Decrypting... Type: Certificate Type: Certificate NEON PKCS12 FATAL pkcs12_2certs.p12 NEON PKCS12 DONE (rc 1) FAIL: pkcs12 =================================== 1 of 1 test failed Please report to bug-gnutls at gnu.org =================================== Making check in ecdsa make[2]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/ecdsa' make ecdsa make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/ecdsa' make[3]: Nothing to be done for `/appl/archives/build_tools/tools/src/gnutls-3.0.9/tests/ecdsa/ecdsa'. make[3]: Leaving directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/ecdsa' make check-TESTS make[3]: Entering directory `/appl/archives/build_tools/tools/build/gnutls-3.0.9/tests/ecdsa' /appl/archives/build_tools/tools/src/gnutls-3.0.9/tests/ecdsa/ecdsa: bad-key.pem: cannot open certtool didn't detect a bad ECDSA key. FAIL: ecdsa =================================== 1 of 1 test failed Please report to bug-gnutls at gnu.org =================================== ________________________________________ From: Eli Zaretskii [eliz at gnu.org] Sent: Sunday, February 05, 2012 11:25 AM To: JONES, BILL Cc: bug-gnutls at gnu.org Subject: Re: BUG Report: gnutls-3.0.9 Solaris 10 64bit > From: "JONES, BILL" > CC: "bug-gnutls at gnu.org" > Date: Sun, 5 Feb 2012 13:48:12 +0000 > Accept-Language: en-US > > How can I disable it's build and testing in gnutls.. I don't see a flag in configure to do so. "make -k" will continue the build even though the crywrap part fails. From nmav at gnutls.org Tue Feb 7 16:22:06 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Tue, 7 Feb 2012 16:22:06 +0100 Subject: BUG Report: gnutls-3.0.9 Solaris 10 64bit In-Reply-To: <2B72DD7087E4A24A895A948352DA2F92020B7EB9@MISOUT7MSGUSR9A.ITServices.sbc.com> References: <2B72DD7087E4A24A895A948352DA2F92020B1C54@MISOUT7MSGUSR9A.ITServices.sbc.com> <83ehubdqa5.fsf@gnu.org> <2B72DD7087E4A24A895A948352DA2F92020B59C0@MISOUT7MSGUSR9A.ITServices.sbc.com> <83obtdcknk.fsf@gnu.org> <2B72DD7087E4A24A895A948352DA2F92020B7EB9@MISOUT7MSGUSR9A.ITServices.sbc.com> Message-ID: On Tue, Feb 7, 2012 at 4:11 PM, JONES, BILL wrote: > All, > OK...so I figured out how to hack configure so it does not need CRYWRAP (it sets a variable to "#" based on the presence of libidn...very definitive.) > And got past that....(and running make -k check ...just in case). > Should I be worried about these few failures in the light of everything else passed. > NEON PKCS12 OK unclient.p12 > Segmentation Fault - core dumped > ? ? ? ?Type: Encrypted > ? ? ? ?Decrypting... > ? ? ? ?Type: Certificate > ? ? ? ?Type: Certificate > NEON PKCS12 FATAL pkcs12_2certs.p12 > NEON PKCS12 DONE (rc 1) > FAIL: pkcs12 Could you run the test under the debugger or preferably valgrind to detect the issue? regards, Nikos From INVALID.NOREPLY at gnu.org Tue Feb 7 19:36:15 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Tue, 07 Feb 2012 18:36:15 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120207-103401.sv0.1484@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> Message-ID: <20120207-203615.sv707.84036@savannah.gnu.org> Update of sr #107948 (project gnutls): Status: None => Done Assigned to: None => nmav _______________________________________________________ Follow-up Comment #2: Hello, it seems gnutls was being overly strict in checking incoming packets for DTLS. The patch below should fix your issue. Thank you for reporting it. http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=35c17f2fd72083bf12c5faa83195d18c3cb759ce _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Tue Feb 7 19:36:22 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Tue, 07 Feb 2012 18:36:22 +0000 Subject: [sr #107940] ECDH key exchange fails if leading zeros are present In-Reply-To: <20120127-091516.sv0.98133@savannah.gnu.org> References: <20120126-232912.sv50355.25250@savannah.gnu.org> <20120127-091516.sv0.98133@savannah.gnu.org> Message-ID: <20120207-203622.sv707.16137@savannah.gnu.org> Update of sr #107940 (project gnutls): Open/Closed: Open => Closed _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Tue Feb 7 22:51:53 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Tue, 07 Feb 2012 21:51:53 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120207-203615.sv707.84036@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> Message-ID: <20120207-215153.sv0.63062@savannah.gnu.org> Follow-up Comment #3, sr #107948 (project gnutls): That indeed fixes the problem for packets lost in the first flights, but some parts remain: * losing the client ChangeCipherSpec will kill the server with unexpected TLS packet. * losing any other packet of the final flight will still deadlock the handshake. The latter will affect both blocking and nonblocking operation; nonblocking DTLS will return GNUTLS_E_AGAIN indefinitely. Can you confirm? _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Tue Feb 7 23:08:03 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Tue, 07 Feb 2012 22:08:03 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120207-215153.sv0.63062@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> Message-ID: <20120208-000803.sv707.68738@savannah.gnu.org> Follow-up Comment #4, sr #107948 (project gnutls): Indeed. I'm already checking it. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Wed Feb 8 10:55:56 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Wed, 08 Feb 2012 09:55:56 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-000803.sv707.68738@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> Message-ID: <20120208-115556.sv707.71319@savannah.gnu.org> Update of sr #107948 (project gnutls): Status: Done => Ready For Test _______________________________________________________ Follow-up Comment #5: I've committed a fix and a test application, which test individual packet loss cases. Let me know if this fixes the issues you notice and/or you notice anything else. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Wed Feb 8 15:49:43 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Wed, 08 Feb 2012 14:49:43 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-115556.sv707.71319@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> Message-ID: <20120208-144942.sv0.51264@savannah.gnu.org> Follow-up Comment #6, sr #107948 (project gnutls): GnuTLS does behave better now, but unfortunately, there are still problems: * losing any, but not all, of ServerHello, ServerKeyExchange, ServerHelloDone, deadlocks the handshake for blocking sessions. * losing all of them sometimes deadlocks the handshake for nonblocking sessions. The server drops retransmitted ClientHello, instead of retransmitting it's own flight, in maybe half the cases. In the other half, everything works out fine. Blocking sessions never retransmit, and this deadlock. This seems strange, but I cant find errors in my test program. * losing any, but not all, of the server's ChangeCipherSpec, Finished causes deadlocks for all sessions. No retransmission is done by the client when a duplicated handshake message from the next epoch is received. I must admit that this is getting academic. Also, maybe I'm reading the DTLS RFC incorrectly. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Wed Feb 8 18:20:24 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Wed, 08 Feb 2012 17:20:24 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-144942.sv0.51264@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> Message-ID: <20120208-192024.sv707.98140@savannah.gnu.org> Follow-up Comment #7, sr #107948 (project gnutls): I'm not been able to reproduce that. I've added a test program that tests the behavior of packet loss in blocking mode (mini-loss2.c) and I do not see what you mention. I couldn't also make the handshake.cpp to deadlock. How did you drop individual handshake packets? (gnutls bundles each flight in a single packet if possible) The issue is quite important. Deadlocks shouldn't occur, so if you have some example code, I'd like to see it. regards, Nikos _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Wed Feb 8 19:42:24 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Wed, 08 Feb 2012 18:42:24 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-192024.sv707.98140@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> Message-ID: <20120208-184224.sv0.63645@savannah.gnu.org> Follow-up Comment #8, sr #107948 (project gnutls): mini-loss.c and mini-loss2.c run and pass on my machine as well. For your question: I have observed that GnuTLS does not coalesce handshake packets into single transport layer packets over the loopback interface, so I used a modified version of handshake.cpp with some more advanced fingerprinting for server handshake packets. The same thing could be done for the client, but I haven't tested that yet. Of course I'd be more than happy to find out that this is all my mistake. Code is attached. (file #25028) _______________________________________________________ Additional Item Attachment: File name: handshake2.cpp Size:5 KB _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Wed Feb 8 19:51:45 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Wed, 08 Feb 2012 18:51:45 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-184224.sv0.63645@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> Message-ID: <20120208-185145.sv0.67130@savannah.gnu.org> Follow-up Comment #9, sr #107948 (project gnutls): Oops. The file I attached did not do quite the right thing (dropped one flight too few), and it didn't include errno.h - for clang compiled it, while gcc will not, for whatever reason. The actuall diff is small, both final flight drop predicates had an off-by-one on the packet counter. (file #25029) _______________________________________________________ Additional Item Attachment: File name: handshake2.cpp Size:5 KB _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Wed Feb 8 23:52:17 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Wed, 08 Feb 2012 22:52:17 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-185145.sv0.67130@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> Message-ID: <20120209-005216.sv707.37163@savannah.gnu.org> Follow-up Comment #10, sr #107948 (project gnutls): It seems the last flight handling wasn't complete. I've improved it quite now. What I cannot see is the non-deterministic behavior you describe. Your tests were quite interesting. I've tried to emulate it in mini-loss. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Thu Feb 9 00:40:42 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Wed, 08 Feb 2012 23:40:42 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120209-005216.sv707.37163@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> <20120209-005216.sv707.37163@savannah.gnu.org> Message-ID: <20120208-234042.sv0.74959@savannah.gnu.org> Follow-up Comment #11, sr #107948 (project gnutls): Now the server side of things works nicely with lost packets. Only dropping three server hello flights still kills the handshake and forces the client to time out, but that's fine. Similar result on the client side. Almost all is well, only losing two ChangeCipherSpec packets is still fatal. The handshake does not deadlock, it simply times out, so that is pretty much fine too. All in all, the bug looks squashed for nonblocking. For blocking, I still see deadlocks, but since can't reproduce, and mini-loss runs fine, I must be doing something wrong there. Judging from this new robustness against loss, packet reordering should be no problem either. If you wish, I can test that thoroughly as well. As for my test code: an update with client drop predicates is attached; if you want to use it for the GnuTLS test suite, I'd be happy to rewrite it and grant you whatever rights necessary. (file #25032) _______________________________________________________ Additional Item Attachment: File name: handshake-all.cpp Size:6 KB _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Thu Feb 9 10:02:08 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Thu, 09 Feb 2012 09:02:08 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120208-234042.sv0.74959@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> <20120209-005216.sv707.37163@savannah.gnu.org> <20120208-234042.sv0.74959@savannah.gnu.org> Message-ID: <20120209-090207.sv0.89887@savannah.gnu.org> Follow-up Comment #12, sr #107948 (project gnutls): The handshake termination could be because of timeouts (might need some trimming). I'll verify that. Do you remember on which dropped packet you saw deadlocks? Contributing test cases for missing packets and/or reordering would be really great. If you are interested I'd invite you to fill the form in the url, and send it to assign at gnu.org. http://www.gnu.org/software/gnulib/Copyright/request-assign.future _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Thu Feb 9 18:19:31 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Thu, 09 Feb 2012 17:19:31 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120209-090207.sv0.89887@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> <20120209-005216.sv707.37163@savannah.gnu.org> <20120208-234042.sv0.74959@savannah.gnu.org> <20120209-090207.sv0.89887@savannah.gnu.org> Message-ID: <20120209-171931.sv0.493@savannah.gnu.org> Follow-up Comment #13, sr #107948 (project gnutls): The deadlocks I was seeing were in fact not deadlocks, but a programming error on my part. Having fixed that, I can't reproduce any deadlocks anymore either, but dropping three server hello flights still kills both varieties of handshake. The server only drops our retransmitted ClientHello packets, and does not retransmit the server hello flight. Same thing goes for dropping client's ChangeCipherSpec: the server won't retransmit it's own flight, but instead drop the retransmitted flights. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From zaki at un0wn.org Fri Feb 10 03:26:52 2012 From: zaki at un0wn.org (supanerd) Date: Thu, 9 Feb 2012 18:26:52 -0800 (PST) Subject: Compiling gnutls on android Message-ID: <33297793.post@talk.nabble.com> HI, i have been wanting to compile Gnutls for android, but it seems that no one has taken interest in such a task as there is almost nothing on the internet about this. May i know if anyone here has ever tried this? What are the challenges and difficulties that may potential arise? Thank you -- View this message in context: http://old.nabble.com/Compiling-gnutls-on-android-tp33297793p33297793.html Sent from the GnuPG - Gnutls - Dev mailing list archive at Nabble.com. From INVALID.NOREPLY at gnu.org Fri Feb 10 19:51:05 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Fri, 10 Feb 2012 18:51:05 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120209-171931.sv0.493@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> <20120209-005216.sv707.37163@savannah.gnu.org> <20120208-234042.sv0.74959@savannah.gnu.org> <20120209-090207.sv0.89887@savannah.gnu.org> <20120209-171931.sv0.493@savannah.gnu.org> Message-ID: <20120210-205104.sv707.84164@savannah.gnu.org> Follow-up Comment #14, sr #107948 (project gnutls): I've quite improved it since then (some packets were discarded by the sliding window used to detect duplicates). Thus I'd expect the issues you mention not to be there. If they are please let me know. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Fri Feb 10 23:06:56 2012 From: INVALID.NOREPLY at gnu.org (anonymous) Date: Fri, 10 Feb 2012 22:06:56 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120210-205104.sv707.84164@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> <20120209-005216.sv707.37163@savannah.gnu.org> <20120208-234042.sv0.74959@savannah.gnu.org> <20120209-090207.sv0.89887@savannah.gnu.org> <20120209-171931.sv0.493@savannah.gnu.org> <20120210-205104.sv707.84164@savannah.gnu.org> Message-ID: <20120210-220656.sv0.2964@savannah.gnu.org> Follow-up Comment #15, sr #107948 (project gnutls): I've retested with current git master, and unfortunately, losing complete server hello flights is still deadly. So is losing packets in the server's final flight: the server will report Handshake Success after the flight is sent, but the client might not receive parts and retransmit it's final flight, which the server will drop. I'm writing a comprehensive test for both drops and reordering, when I'm done, I'll send it to -devel. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Sat Feb 11 10:29:14 2012 From: INVALID.NOREPLY at gnu.org (Sebastien Helleu) Date: Sat, 11 Feb 2012 09:29:14 +0000 Subject: [sr #107954] Fails to connect to irc.chatspike.net:6697: Handshake has failed Message-ID: <20120211-102913.sv8049.18917@savannah.gnu.org> URL: Summary: Fails to connect to irc.chatspike.net:6697: Handshake has failed Project: GnuTLS Submitted by: flashcode Submitted on: sam. 11 f?vr. 2012 10:29:13 CET Category: Core library Priority: 5 - Normal Severity: 3 - Normal Status: None Privacy: Public Assigned to: None Originator Email: Open/Closed: Open Discussion Lock: Any Operating System: GNU/Linux _______________________________________________________ Details: Hi, I'm author of WeeChat, an IRC client. I have a problem connecting to server irc.chatspike.net:6697 in WeeChat, so I tried with gnutls-cli and have same problem, here is the output of command: $ gnutls-cli -v gnutls-cli (GnuTLS) 3.0.12 Packaged by Debian (3.0.12-2) Copyright (C) 2012 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later . This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Written by Nikos Mavrogiannopoulos. $ gnutls-cli -d 2 -p 6697 irc.chatspike.net |<2>| ASSERT: pkcs11.c:453 Resolving 'irc.chatspike.net'... Connecting to '208.68.94.168:6697'... |<2>| ASSERT: gnutls_constate.c:716 |<2>| ASSERT: gnutls_buffers.c:958 |<2>| ASSERT: gnutls_buffers.c:473 |<2>| ASSERT: gnutls_buffers.c:473 |<2>| ASSERT: gnutls_record.c:954 |<2>| ASSERT: gnutls_buffers.c:1171 |<2>| ASSERT: gnutls_handshake.c:1272 |<2>| ASSERT: gnutls_handshake.c:2483 *** Fatal error: The TLS connection was non-properly terminated. *** Handshake has failed GnuTLS error: The TLS connection was non-properly terminated. I tried openssl, the connection is ok with this command: $ openssl s_client -connect irc.chatspike.net:6697 Thank you for your help. _______________________________________________________ Reply to this item at: _______________________________________________ Message post? via/par Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Sat Feb 11 10:48:13 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Sat, 11 Feb 2012 09:48:13 +0000 Subject: [sr #107954] Fails to connect to irc.chatspike.net:6697: Handshake has failed In-Reply-To: <20120211-102913.sv8049.18917@savannah.gnu.org> References: <20120211-102913.sv8049.18917@savannah.gnu.org> Message-ID: <20120211-114813.sv707.16319@savannah.gnu.org> Follow-up Comment #1, sr #107954 (project gnutls): Hello, I tried gnutls-cli-debug, and didn't show anything curious. However by trying each protocol version separately I noticed that this server breaks if it sees TLS 1.2. If you disable it you'll be able to connect fine. http://www.gnu.org/software/gnutls/manual/html_node/Interoperability.html _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Sat Feb 11 11:13:29 2012 From: INVALID.NOREPLY at gnu.org (Sebastien Helleu) Date: Sat, 11 Feb 2012 10:13:29 +0000 Subject: [sr #107954] Fails to connect to irc.chatspike.net:6697: Handshake has failed In-Reply-To: <20120211-114813.sv707.16319@savannah.gnu.org> References: <20120211-102913.sv8049.18917@savannah.gnu.org> <20120211-114813.sv707.16319@savannah.gnu.org> Message-ID: <20120211-111329.sv8049.98488@savannah.gnu.org> Follow-up Comment #2, sr #107954 (project gnutls): Thank you, now it's working in WeeChat by forcing priority, using the string in your link. _______________________________________________________ Reply to this item at: _______________________________________________ Message post? via/par Savannah http://savannah.gnu.org/ From larsi at gnus.org Sat Feb 11 16:42:23 2012 From: larsi at gnus.org (Lars Ingebrigtsen) Date: Sat, 11 Feb 2012 16:42:23 +0100 Subject: GnuTLS hangs in Emacs Message-ID: <87aa4pe5r4.fsf@gnus.org> I'm trying to investigate some "hard" Emacs hangs that seem network-related. My laptop went into sleep mode, and when it came back, Emacs hung hard. It may have changed its IP address or something. strace showed the following: Process 12143 attached with 3 threads - interrupt to quit [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0 [pid 12145] restart_syscall(<... resuming interrupted call ...> [pid 12144] restart_syscall(<... resuming interrupted call ...> [pid 12143] <... sendto resumed> ) = -1 EAGAIN (Resource temporarily unavailable) [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0) = -1 EAGAIN (Resource temporarily unavailable) [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0) = -1 EAGAIN (Resource temporarily unavailable) [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0) = -1 EAGAIN (Resource temporarily unavailable) larsi at rusty:~/pgnus$ ls -l /proc/12143/fd/10 lrwx------ 1 larsi larsi 64 2012-01-27 13:14 /proc/12143/fd/10 -> socket:[586673] larsi at rusty:~/pgnus$ lsof | grep 586673 emacs 12143 larsi 10u IPv4 586673 0t0 TCP 10.0.1.2:50099->dough.gmane.org:nntp (ESTABLISHED) This is a STARTTLS connection, so I'm guessing that the sendto up there is from GnuTLS. I know virtually nothing about GnuTLS internals, so first of all -- does it seem likely that that sendto is from GnuTLS? And if so, is there any way to tell GnuTLS to not, er, try so very hard to send stuff? This is with Ubuntu 11.10, which has GnuTLS 2.10.5, apparently. -- (domestic pets only, the antidote for overdose, milk.) http://lars.ingebrigtsen.no * Sent from my Rome From s_buckhe at cs.uni-kl.de Sat Feb 11 17:21:24 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 11 Feb 2012 17:21:24 +0100 Subject: Exhaustive DTLS handshake test Message-ID: <4F369584.4070201@cs.uni-kl.de> Hello, as promised, I built a (more or less) exhaustive test for the DTLS handshake procedure. The test program will try all sensible permutations and drop varieties that could affect handshake flight. The rules are simple: * never touch ClientHello packets * permute the other flight atomically in some manner, don't span flights * drop packets as needed This gives us 6*2*6*256 = a boatload of longrunning tests. I let the program run over night, and the blocking DTLS handshake is indeed very stable: it always works, unless ServerHello flights are not permuted, but lost completely. [1] Not so for the nonblocking handshake: timeouts occur much more often, and with no distinguishable pattern. My guess is that the test code is still incorrect there. The test program is attached in a working, i.e. not optimized, state. Next thing I'll do is group all the permutation runs for one drop variety and run them in batch with parallel processes. That should speed the tests up quite a lot. [1] The test is not yet through, but this pattern emerged and is stable -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls-handshake.c Type: text/x-csrc Size: 14943 bytes Desc: not available URL: From nmav at gnutls.org Sat Feb 11 17:33:34 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 11 Feb 2012 17:33:34 +0100 Subject: GnuTLS hangs in Emacs In-Reply-To: <87aa4pe5r4.fsf@gnus.org> References: <87aa4pe5r4.fsf@gnus.org> Message-ID: <4F36985E.6010005@gnutls.org> On 02/11/2012 04:42 PM, Lars Ingebrigtsen wrote: > I'm trying to investigate some "hard" Emacs hangs that seem > network-related. > > My laptop went into sleep mode, and when it came back, Emacs hung hard. > It may have changed its IP address or something. > strace showed the following: > Process 12143 attached with 3 threads - interrupt to quit > [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0 > [pid 12145] restart_syscall(<... resuming interrupted call ...> > [pid 12144] restart_syscall(<... resuming interrupted call ...> > [pid 12143] <... sendto resumed> ) = -1 EAGAIN (Resource temporarily unavailable) > [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0) = -1 EAGAIN (Resource temporarily unavailable) > [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0) = -1 EAGAIN (Resource temporarily unavailable) > [pid 12143] sendto(10, "\340\204s\374\204\22\231\26M;?\307\220=^\206T\371Q\374o\324\246i\31\256\31$\314\315\367\362"..., 136, 0, NULL, 0) = -1 EAGAIN (Resource temporarily unavailable) > larsi at rusty:~/pgnus$ ls -l /proc/12143/fd/10 > lrwx------ 1 larsi larsi 64 2012-01-27 13:14 /proc/12143/fd/10 -> socket:[586673] > larsi at rusty:~/pgnus$ lsof | grep 586673 > emacs 12143 larsi 10u IPv4 586673 0t0 TCP 10.0.1.2:50099->dough.gmane.org:nntp (ESTABLISHED) > This is a STARTTLS connection, so I'm guessing that the sendto up there > is from GnuTLS. Hello, I see not much related to gnutls. You should bring it up with the emacs people. GnuTLS reports the EAGAIN back to application thus the application might decide to fail at some point. In any case this looks like a sendto() issue. Why would it send EAGAIN forever? regards, Nikos From nmav at gnutls.org Sat Feb 11 18:37:49 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 11 Feb 2012 18:37:49 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F369584.4070201@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> Message-ID: <4F36A76D.6080209@gnutls.org> On 02/11/2012 05:21 PM, Sean Buckheister wrote: > as promised, I built a (more or less) exhaustive test for the DTLS > handshake procedure. The test program will try all sensible permutations > and drop varieties that could affect handshake flight. The rules are simple: > * never touch ClientHello packets > * permute the other flight atomically in some manner, don't span flights > * drop packets as needed > This gives us 6*2*6*256 = a boatload of longrunning tests. I let the > program run over night, and the blocking DTLS handshake is indeed very > stable: it always works, unless ServerHello flights are not permuted, > but lost completely. [1] Thank you. What happens if flights are permuted? I tried to run the app and I got: An unexpected TLS packet was received. (fatal) -- ServerHello(012), ServerFinished(01), ClientFinished(012) :- I'll try to figure out, but would be nice if you could explain the output of the test. > Not so for the nonblocking handshake: timeouts occur much more often, > and with no distinguishable pattern. My guess is that the test code is > still incorrect there. You mean you receive a fatal GNUTLS_E_TIMEDOUT earlier than expected? regards, Nikos From s_buckhe at cs.uni-kl.de Sat Feb 11 18:42:23 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 11 Feb 2012 18:42:23 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F36A76D.6080209@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> Message-ID: <4F36A87F.7010908@cs.uni-kl.de> > Thank you. What happens if flights are permuted? Ironically, it works fine. > I tried to run the > app and I got: > An unexpected TLS packet was received. (fatal) > -- ServerHello(012), ServerFinished(01), ClientFinished(012) :- Wow. On your machine it fails with absolutely no change to the packet stream? > I'll try to figure out, but would be nice if you could explain the > output of the test. The output has three fields: :- Status is either "++" for a successful test, or "--" for a failure. Permutation variety lists each flight and the order in which packets will be sent to the peer, so ServerHello(201) will send ServerHelloDone first, then the other two packets in original order. Drop variety simply lists packets that are dropped three times, drops occuring after permutations. > You mean you receive a fatal GNUTLS_E_TIMEDOUT earlier than expected? Sort of. They don't occur too earlier (it doesn't feel too early in wallclock time, anyway), but they do occur where they didn't in the blocking case. From nmav at gnutls.org Sat Feb 11 20:38:10 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 11 Feb 2012 20:38:10 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F36A87F.7010908@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> Message-ID: <4F36C3A2.1020905@gnutls.org> On 02/11/2012 06:42 PM, Sean Buckheister wrote: >> Thank you. What happens if flights are permuted? > Ironically, it works fine. >> I tried to run the >> app and I got: >> An unexpected TLS packet was received. (fatal) >> -- ServerHello(012), ServerFinished(01), ClientFinished(012) :- > Wow. On your machine it fails with absolutely no change to the packet > stream? It must have been some older library that was conflicting. Now it works. Interestingly I get few outputs with a single '+'. Cannot figure out why. >> You mean you receive a fatal GNUTLS_E_TIMEDOUT earlier than expected? > Sort of. They don't occur too earlier (it doesn't feel too early in > wallclock time, anyway), but they do occur where they didn't in the > blocking case. The default timeout should be 60 seconds. Could you add a timer to verify whether they fail earlier? regards, Nikos From s_buckhe at cs.uni-kl.de Sat Feb 11 22:53:13 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 11 Feb 2012 22:53:13 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F36C3A2.1020905@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> Message-ID: <4F36E349.1060404@cs.uni-kl.de> > The default timeout should be 60 seconds. Could you add a timer to > verify whether they fail earlier? I have now, and a few other additions: New status "!!". This will be shown for tests that are in blocking mode and don't mak progress for four minutes during setup and two minutes afterward, or those in nonblocking mode that don't complete within four minutes. For session timeouts that happened before 60 seconds wallclock time have elapsed, the error message will be "{spurious}<[?]". I have never seen this message yet. Packet and flight names have been shortened a bit to always fit on one screen line in my terminal. Your mileage may vary. A compile time parameter, run_tests(N), will cause the program to run N session tests in parallel. Values of about 1000 are useful, expect additional RAM usage of about 1GB. -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls-handshake.c Type: text/x-csrc Size: 16233 bytes Desc: not available URL: From nmav at gnutls.org Sun Feb 12 10:36:31 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 12 Feb 2012 10:36:31 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F36E349.1060404@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> Message-ID: <4F37881F.3040906@gnutls.org> On 02/11/2012 10:53 PM, Sean Buckheister wrote: >> The default timeout should be 60 seconds. Could you add a timer to >> verify whether they fail earlier? > > I have now, and a few other additions: > > New status "!!". This will be shown for tests that are in blocking mode > and don't mak progress for four minutes during setup and two minutes > afterward, or those in nonblocking mode that don't complete within four > minutes. It seems there are still cases that might cause long delays or deadlocks. It could be because some timer is not reset at some point which leads to long waiting time and then to timeout. Would it be possible to replay only a single configuration in order to debug it? Btw. which compiler do you use? The program issues quite some warnings with gcc. regards, Nikos From s_buckhe at cs.uni-kl.de Sun Feb 12 17:10:09 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 12 Feb 2012 17:10:09 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F37881F.3040906@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> Message-ID: <4F37E461.5080605@cs.uni-kl.de> > Would it be > possible to replay only a single configuration in order to debug it? Of course. The program now takes arguments: -shello, -sfinished, -cfinished: permutation to use for server hello, server finished, and client finished flights. The program parses them as it prints them. Any additional arguments are parsed as packet names to drop, the program parses them as it prints them. A packet given as an argument will be dropped three times, as in the batch run. As for the batch runs: i recommend piping output of the program through cat or some other preprocessor before writing to disk, my shells messed up the output quite a lot. For distinguishability, every line of output is now prefixed with a unique integer for each session test. > Btw. which compiler do you use? The program issues quite some warnings > with gcc. I used clang, which never warned about anything. gcc did complain in a few places, this is now fixed. -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls-handshake.c Type: text/x-csrc Size: 18576 bytes Desc: not available URL: From nmav at gnutls.org Mon Feb 13 00:06:14 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Mon, 13 Feb 2012 00:06:14 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F37E461.5080605@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> Message-ID: <4F3845E6.7020704@gnutls.org> On 02/12/2012 05:10 PM, Sean Buckheister wrote: >> Would it be >> possible to replay only a single configuration in order to debug it? > > Of course. The program now takes arguments: > > -shello, -sfinished, -cfinished: permutation to use for server hello, > server finished, and client finished flights. The program parses them as > it prints them. > Any additional arguments are parsed as packet names to drop, the program > parses them as it prints them. A packet given as an argument will be > dropped three times, as in the batch run. Thank you, it is a very useful tool. I've uncovered some issues that still need to be solved. regards, Nikos From s_buckhe at cs.uni-kl.de Mon Feb 13 00:09:11 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Mon, 13 Feb 2012 00:09:11 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F3845E6.7020704@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> Message-ID: <4F384697.2020904@cs.uni-kl.de> > Thank you, it is a very useful tool. I've uncovered some issues that > still need to be solved. I'm glad you think so. If you're interested in including this program with gnutls, please let me know. So far, I've also tried to fix some of the issues uncovered, but unfortunately, every attempt has only made things worse. From larsi at gnus.org Sat Feb 11 18:13:03 2012 From: larsi at gnus.org (Lars Ingebrigtsen) Date: Sat, 11 Feb 2012 18:13:03 +0100 Subject: GnuTLS hangs in Emacs In-Reply-To: <4F36985E.6010005@gnutls.org> (Nikos Mavrogiannopoulos's message of "Sat, 11 Feb 2012 17:33:34 +0100") References: <87aa4pe5r4.fsf@gnus.org> <4F36985E.6010005@gnutls.org> Message-ID: <87bop58fa8.fsf@gnus.org> Nikos Mavrogiannopoulos writes: > GnuTLS reports the EAGAIN back to application thus the application > might decide to fail at some point. In any case this looks like a > sendto() issue. Why would it send EAGAIN forever? Yeah, the bug was in the way Emacs would retry EAGAIN from libgnutls. I've now fixed this in the Emacs sources. -- (domestic pets only, the antidote for overdose, milk.) http://lars.ingebrigtsen.no * Sent from my Rome From simon at josefsson.org Mon Feb 13 13:02:53 2012 From: simon at josefsson.org (Simon Josefsson) Date: Mon, 13 Feb 2012 13:02:53 +0100 Subject: Compiling gnutls on android In-Reply-To: <33297793.post@talk.nabble.com> (supanerd's message of "Thu, 9 Feb 2012 18:26:52 -0800 (PST)") References: <33297793.post@talk.nabble.com> Message-ID: <87vcnbszyq.fsf@latte.josefsson.org> supanerd writes: > HI, i have been wanting to compile Gnutls for android, but it seems that no > one has taken interest in such a task as there is almost nothing on the > internet about this. May i know if anyone here has ever tried this? What are > the challenges and difficulties that may potential arise? It should be possible, I did some porting of other gnulib-using C stuff to Android and while there were problems, they are usually solvable with some tweaking. I would start by getting the dependencies to build (gmp, nettle, libtasn1) and then try with GnuTLS as well. /Simon From nmav at gnutls.org Mon Feb 13 19:53:13 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Mon, 13 Feb 2012 19:53:13 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F384697.2020904@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> <4F384697.2020904@cs.uni-kl.de> Message-ID: <4F395C19.6000609@gnutls.org> On 02/13/2012 12:09 AM, Sean Buckheister wrote: >> Thank you, it is a very useful tool. I've uncovered some issues >> that still need to be solved. > I'm glad you think so. If you're interested in including this > program with gnutls, please let me know. I am. I was thinking to test cases of particular interest, during make check. > So far, I've also tried to fix some of the issues uncovered, but > unfortunately, every attempt has only made things worse. It is not an easy fix. I was assuming that receiving a packet is enough as an indicator that the previously sent flight was received. Clearly this is not enough if a whole flight is lost and a retransmission occurs. I'm in the process of making this check more clever to cover this case. regards, Nikos From s_buckhe at cs.uni-kl.de Mon Feb 13 19:57:50 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Mon, 13 Feb 2012 19:57:50 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F395C19.6000609@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> <4F384697.2020904@cs.uni-kl.de> <4F395C19.6000609@gnutls.org> Message-ID: <4F395D2E.5080107@cs.uni-kl.de> > I am. I was thinking to test cases of particular interest, during make > check. Ok, I'll request the necessary paperwork then. The code could use a little cleaning, too, a little documentation, and overall a little transforming into something not hacked together to break stuff. From zaki at un0wn.org Tue Feb 14 09:55:21 2012 From: zaki at un0wn.org (supanerd) Date: Tue, 14 Feb 2012 00:55:21 -0800 (PST) Subject: Compiling gnutls on android In-Reply-To: <87vcnbszyq.fsf@latte.josefsson.org> References: <33297793.post@talk.nabble.com> <87vcnbszyq.fsf@latte.josefsson.org> Message-ID: <33320492.post@talk.nabble.com> Thanks for answering. Could you be more specific on what "C stuff" u used for the porting please :)? Simon Josefsson-2 wrote: > > supanerd writes: > >> HI, i have been wanting to compile Gnutls for android, but it seems that >> no >> one has taken interest in such a task as there is almost nothing on the >> internet about this. May i know if anyone here has ever tried this? What >> are >> the challenges and difficulties that may potential arise? > > It should be possible, I did some porting of other gnulib-using C stuff > to Android and while there were problems, they are usually solvable with > some tweaking. I would start by getting the dependencies to build (gmp, > nettle, libtasn1) and then try with GnuTLS as well. > > /Simon > > _______________________________________________ > Gnutls-devel mailing list > Gnutls-devel at gnu.org > https://lists.gnu.org/mailman/listinfo/gnutls-devel > > -- View this message in context: http://old.nabble.com/Compiling-gnutls-on-android-tp33297793p33320492.html Sent from the GnuPG - Gnutls - Dev mailing list archive at Nabble.com. From nmav at gnutls.org Tue Feb 14 19:18:27 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Tue, 14 Feb 2012 19:18:27 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F395D2E.5080107@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> <4F384697.2020904@cs.uni-kl.de> <4F395C19.6000609@gnutls.org> <4F395D2E.5080107@cs.uni-kl.de> Message-ID: <4F3AA573.5040003@gnutls.org> On 02/13/2012 07:57 PM, Sean Buckheister wrote: >> I am. I was thinking to test cases of particular interest, during make >> check. > > Ok, I'll request the necessary paperwork then. The code could use a > little cleaning, too, a little documentation, and overall a little > transforming into something not hacked together to break stuff. Hey Sean, I've put the test in the gnutls tree under tests [0]. I believe the current version copes with most cases of lost packets and re-arrangements (I'm in the process of verifying that). I've put the copyright holder as you. Once FSF receives the papers from you I'll update it to FSF. Note that I've tweaked the code in order to compile with gnutls' cflags. regards, Nikos [0]. http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=tree;f=tests/dtls;hb=HEAD From s_buckhe at cs.uni-kl.de Tue Feb 14 20:43:53 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Tue, 14 Feb 2012 20:43:53 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F3AA573.5040003@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> <4F384697.2020904@cs.uni-kl.de> <4F395C19.6000609@gnutls.org> <4F395D2E.5080107@cs.uni-kl.de> <4F3AA573.5040003@gnutls.org> Message-ID: <4F3AB979.5050801@cs.uni-kl.de> > Hey Sean, > I've put the test in the gnutls tree under tests [0]. Cool! :) > I believe the > current version copes with most cases of lost packets and > re-arrangements (I'm in the process of verifying that). I fear not, and I am terribly sorry. Due to an oversight, the programm dropped far less packets than it actually should. The patch to fix this is rather short: add "filter_current_idx++;" at the end of filter_run_next. Not having that line there will only cause the filter index to grow beyond the bounds of the actual filter chain, and since the chain is initialized with null values, and null values are interpreted as "send packet now", many packets would get sent instead of dropped. As of current git head, there are almost 6000 variations that fail the test with 1000 child processes, but pass with only 100. This seems rather odd, running on a machine with four cores an 10ms between any two test run forks. Maybe i made a big mistake fixing my original mistake, but looking at the traces, it doesn't look much like it. Running the full suite, with 100 children, in nonblocking mode also fails a number of the tests. I am puzzled. > I've put the copyright holder as you. Once FSF receives the papers from > you I'll update it to FSF. (I'm not exactly sure whether I can legally transfer copyright. To my knowledge, I can grant a nonrevocable exclusive use license though, which should be pretty much the same thing.) > Note that I've tweaked the code in order to compile with gnutls' cflags. I have tried to extract the gnutls cflags, they are "-std=gnu99 -g -O2" for me. The program compiled fine with those, but I must be missing something. Now it compiles with -std=c89, which should work for everyone. I've also made a number of modifications to avoid code duplication for filter_packet_* and filter_permute_*, more sensible error handling, more sensible child process handling (^C now kills the whole process tree, not just the master process). I would also add tests for certificate authentication of both client and server, four extra packets, which would make the test suite a bit more comprehensive. It would end up being more than 0.3 million test runs. Also, there are a number of parameters missing: * run tests with nonblocking DTLS * set debug output level * set child process limit * set retransmit timeouts? I have noticed that low retransmit timeouts and large child process limits yield to a lot of false negatives in the batch run. -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls-handshake.c Type: text/x-csrc Size: 16830 bytes Desc: not available URL: From nmav at gnutls.org Tue Feb 14 21:14:12 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Tue, 14 Feb 2012 21:14:12 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F3AB979.5050801@cs.uni-kl.de> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> <4F384697.2020904@cs.uni-kl.de> <4F395C19.6000609@gnutls.org> <4F395D2E.5080107@cs.uni-kl.de> <4F3AA573.5040003@gnutls.org> <4F3AB979.5050801@cs.uni-kl.de> Message-ID: <4F3AC094.8010209@gnutls.org> On 02/14/2012 08:43 PM, Sean Buckheister wrote: > I fear not, and I am terribly sorry. Due to an oversight, the programm > dropped far less packets than it actually should. The patch to fix this > is rather short: add "filter_current_idx++;" at the end of > filter_run_next. So would filter_run_next contain filter_current_idx++ twice? > As of current git head, there are almost 6000 variations that fail the > test with 1000 child processes, but pass with only 100. This seems > rather odd, running on a machine with four cores an 10ms between any two > test run forks. Maybe i made a big mistake fixing my original mistake, > but looking at the traces, it doesn't look much like it. I noticed that too. However if I repeat the same tests in single mode they succeed. I believe that is because the cases that fail require quite some retransmissions and in 100 or 1000 process cases they might take more time than the allowed timeout. > Running the full suite, with 100 children, in nonblocking mode also > fails a number of the tests. I am puzzled. I have not thoroughly tested the non-blocking mode. > (I'm not exactly sure whether I can legally transfer copyright. To my > knowledge, I can grant a nonrevocable exclusive use license though, > which should be pretty much the same thing.) If it is not possible, you could release it under GPLv3 (e.g. with a mail in gnutls-devel or so) and that would be fine with me since it is an independent module. >> Note that I've tweaked the code in order to compile with gnutls' cflags. > I have tried to extract the gnutls cflags, they are "-std=gnu99 -g -O2" > for me. The program compiled fine with those, but I must be missing > something. Now it compiles with -std=c89, which should work for everyone. We use more than that in development. Use ./configure --enable-gcc-warnings to enable them. > I've also made a number of modifications to avoid code duplication for > filter_packet_* and filter_permute_*, more sensible error handling, more > sensible child process handling (^C now kills the whole process tree, > not just the master process). I would also add tests for certificate > authentication of both client and server, four extra packets, which > would make the test suite a bit more comprehensive. It would end up > being more than 0.3 million test runs. Feel free to send me any update. > Also, there are a number of parameters missing: > > * run tests with nonblocking DTLS > * set debug output level > * set child process limit > * set retransmit timeouts? > > I have noticed that low retransmit timeouts and large child process > limits yield to a lot of false negatives in the batch run. That could be because of the high number of retransmissions in case of a low retransmit timeout. regards, Nikos From s_buckhe at cs.uni-kl.de Tue Feb 14 21:24:57 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Tue, 14 Feb 2012 21:24:57 +0100 Subject: Exhaustive DTLS handshake test In-Reply-To: <4F3AC094.8010209@gnutls.org> References: <4F369584.4070201@cs.uni-kl.de> <4F36A76D.6080209@gnutls.org> <4F36A87F.7010908@cs.uni-kl.de> <4F36C3A2.1020905@gnutls.org> <4F36E349.1060404@cs.uni-kl.de> <4F37881F.3040906@gnutls.org> <4F37E461.5080605@cs.uni-kl.de> <4F3845E6.7020704@gnutls.org> <4F384697.2020904@cs.uni-kl.de> <4F395C19.6000609@gnutls.org> <4F395D2E.5080107@cs.uni-kl.de> <4F3AA573.5040003@gnutls.org> <4F3AB979.5050801@cs.uni-kl.de> <4F3AC094.8010209@gnutls.org> Message-ID: <4F3AC319.8080503@cs.uni-kl.de> > So would filter_run_next contain filter_current_idx++ twice? Elements, "filter_current_idx--". Without this, the filters get stuck. Sorry. > I noticed that too. However if I repeat the same tests in single mode > they succeed. I believe that is because the cases that fail require > quite some retransmissions and in 100 or 1000 process cases they might > take more time than the allowed timeout. That's my guess as well. It seems a little awkward though, since the machine does almost nothing while tests themselves are run. Using 100 or maybe 200 children seems like a good choice as far as speed goes, without producing false negatives. > I have not thoroughly tested the non-blocking mode. I'm doing this right now. And a lot of it fails; when the run is completed, I'll attempt to distill useful information out of the logs. Until now, I've looked at the blocking case mainly for convenience, i would guess that DTLS is used in nonblocking mode often enough to check thoroughly. > If it is not possible, you could release it under GPLv3 (e.g. with a > mail in gnutls-devel or so) and that would be fine with me since it is > an independent module. That would be an option. I guess I'll do that once all the options I still feel missing are implemented. > We use more than that in development. Use ./configure > --enable-gcc-warnings to enable them. Thank you, I'll go for that and use those flags for development as well. >> I've also made a number of modifications to avoid code duplication for >> filter_packet_* and filter_permute_*, more sensible error handling, more >> sensible child process handling (^C now kills the whole process tree, >> not just the master process). I would also add tests for certificate >> authentication of both client and server, four extra packets, which >> would make the test suite a bit more comprehensive. It would end up >> being more than 0.3 million test runs. > > Feel free to send me any update. When I'm done, sure. My last mail contained a version with the mentioned changes, further versions I'd mail to you directly then. I really hope to get the whole thing stable and done soon, a nearly unbreakable handshake would clearly benefit all users of the DTLS portion. From s_buckhe at cs.uni-kl.de Wed Feb 15 03:55:26 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Wed, 15 Feb 2012 03:55:26 +0100 Subject: [Patch] Fix nonblocking DTLS Message-ID: <4F3B1E9E.5000906@cs.uni-kl.de> Hi, after seeing lots and lots of failures in nonblocking DTLS handshakes, I went digging through code and packet traces. I found that a gnutls server will not retransmit it's last handshake flight for nonblocking, nonresuming session, while the client would continue to request such retransmission by duplicating it's respective last flight. Ultimately, this would lead to timeouts. The offending piece of code is gnutls_dtls.c, _dtls_transmit, lines 254-255. Removing those sort of fixed DTLS -nb, i.e. all 18432 handshake sequence trials of dtls-stress passed. make check passed as well. There should be no problem removing these two lines, as _dtls_transmit is only called directly when a handshake sequence should be flushed, and indirectly when a handshake packet was received when none were expected. A patch is attached, please let me know what you think. -- Sean -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls.patch Type: text/x-patch Size: 1379 bytes Desc: not available URL: From nmav at gnutls.org Wed Feb 15 15:05:38 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Wed, 15 Feb 2012 15:05:38 +0100 Subject: [Patch] Fix nonblocking DTLS In-Reply-To: <4F3B1E9E.5000906@cs.uni-kl.de> References: <4F3B1E9E.5000906@cs.uni-kl.de> Message-ID: <4F3BBBB2.2070601@gnutls.org> On 02/15/2012 03:55 AM, Sean Buckheister wrote: > Hi, > > after seeing lots and lots of failures in nonblocking DTLS handshakes, I > went digging through code and packet traces. I found that a gnutls > server will not retransmit it's last handshake flight for nonblocking, > nonresuming session, while the client would continue to request such > retransmission by duplicating it's respective last flight. Ultimately, > this would lead to timeouts. > The offending piece of code is gnutls_dtls.c, _dtls_transmit, lines > 254-255. Removing those sort of fixed DTLS -nb, i.e. all 18432 handshake > sequence trials of dtls-stress passed. make check passed as well. Thank you for debugging it and figuring it out. I've commited the fix. regards, Nikos From s_buckhe at cs.uni-kl.de Thu Feb 16 14:29:40 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Thu, 16 Feb 2012 14:29:40 +0100 Subject: [Patch] Fix blocking DTLS Message-ID: <4F3D04C4.3060703@cs.uni-kl.de> Hi, investigating blocking DTLS handshake failure, I found that they fail because the server will interpret a retransmitted Finished packet from the client just as it would treat a Hello, and spuriosly initiates rehandshake. Only handling the Hello packets in this manner fixes that, and now all dtls-stress handshake sequences pass (with appropriate timeouts for such an adversarial network). Patch is attached. -- Sean -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls.patch Type: text/x-patch Size: 1106 bytes Desc: not available URL: From nmav at gnutls.org Thu Feb 16 14:45:24 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Thu, 16 Feb 2012 14:45:24 +0100 Subject: [Patch] Fix blocking DTLS In-Reply-To: <4F3D04C4.3060703@cs.uni-kl.de> References: <4F3D04C4.3060703@cs.uni-kl.de> Message-ID: <4F3D0874.2070805@gnutls.org> On 02/16/2012 02:29 PM, Sean Buckheister wrote: > Hi, > > investigating blocking DTLS handshake failure, I found that they fail > because the server will interpret a retransmitted Finished packet from > the client just as it would treat a Hello, and spuriosly initiates > rehandshake. Only handling the Hello packets in this manner fixes that, > and now all dtls-stress handshake sequences pass (with appropriate > timeouts for such an adversarial network). Nice fix, applied. Which case did you notice failing? Does it fix the parallel checks? regards, Nikos From s_buckhe at cs.uni-kl.de Thu Feb 16 15:00:58 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Thu, 16 Feb 2012 15:00:58 +0100 Subject: [Patch] Fix blocking DTLS In-Reply-To: <4F3D0874.2070805@gnutls.org> References: <4F3D04C4.3060703@cs.uni-kl.de> <4F3D0874.2070805@gnutls.org> Message-ID: <4F3D0C1A.4060907@cs.uni-kl.de> [Oh, elements ... Copy to list since I hit the wrong button. Again.] > Nice fix, applied. Which case did you notice failing? Lots. Just some examples: SHello(210), SFinished(10), CFinished(210) :- SHello, SKeyExchange, SHelloDone, CKeyExchange, CChangeCipherSpec, CFinished, SChangeCipherSpec, SFinished SHello(021), SFinished(10), CFinished(102) :- CKeyExchange, CChangeCipherSpec, CFinished, SChangeCipherSpec, SFinished SHello(120), SFinished(10), CFinished(120) :- SHelloDone, CFinished, SChangeCipherSpec, SFinished It feels like any case that has an incomplete final flight. It would make sense, too, since the client would then retransmit it's final flight, including the Finished packet, after which the server would initiate rehandshake where none should have happened. > Does it fix the parallel checks? With 1000 children on my machine and timeouts at twice the defaults (120s handshake timeout, 240s kill timeout), yes. More children need higher timeouts to work, but they do work. I'll add two-way certificate authentication and look how it holds up. It should work fine; all cert packets are contained in inner flights, all of which gnutls handles perfectly fine. From giuseppe at southpole.se Wed Feb 15 11:21:02 2012 From: giuseppe at southpole.se (Giuseppe Scrivano) Date: Wed, 15 Feb 2012 11:21:02 +0100 Subject: [PATCH] Fix file leak in an example application. Message-ID: Hello, A one-line fix for an example application. Cheers, Giuseppe >From de9425794cdefccf1d18aeebc17cde5a274f7e5e Mon Sep 17 00:00:00 2001 From: Giuseppe Scrivano Date: Wed, 15 Feb 2012 11:13:54 +0100 Subject: [PATCH] Fix file leak in an example application. --- doc/examples/ex-cert-select.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/doc/examples/ex-cert-select.c b/doc/examples/ex-cert-select.c index d45e8e5..e99baf4 100644 --- a/doc/examples/ex-cert-select.c +++ b/doc/examples/ex-cert-select.c @@ -59,6 +59,8 @@ load_file (const char *file) || !(ptr = malloc ((size_t) filelen)) || fread (ptr, 1, (size_t) filelen, f) < (size_t) filelen) { + if (f) + fclose (f); return loaded_file; } -- 1.7.7.6 From nmav at gnutls.org Thu Feb 16 16:19:01 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Thu, 16 Feb 2012 16:19:01 +0100 Subject: [PATCH] Fix file leak in an example application. In-Reply-To: References: Message-ID: <4F3D1E65.8030900@gnutls.org> On 02/15/2012 11:21 AM, Giuseppe Scrivano wrote: > Hello, > > A one-line fix for an example application. Thank you. Applied. regards, Nikos From s_buckhe at cs.uni-kl.de Fri Feb 17 01:21:03 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Fri, 17 Feb 2012 01:21:03 +0100 Subject: Function to get current dtls retransmit timeout Message-ID: <4F3D9D6F.6010704@cs.uni-kl.de> Hi, what I'm missing a little is a function to query the current value of the DTLS retransmit timer. This would be very useful for nonblocking operations. Without such knowledge one has to poll the handshake layer every so often, because it might want to retransmit something. Extracting the exact value would make polling unnecessary, since one could simply set the select() or similar timeout to that value. Thoughts? -- Sean From nmav at gnutls.org Fri Feb 17 08:51:17 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Fri, 17 Feb 2012 08:51:17 +0100 Subject: Function to get current dtls retransmit timeout In-Reply-To: <4F3D9D6F.6010704@cs.uni-kl.de> References: <4F3D9D6F.6010704@cs.uni-kl.de> Message-ID: <4F3E06F5.5050400@gnutls.org> On 02/17/2012 01:21 AM, Sean Buckheister wrote: > Hi, > > what I'm missing a little is a function to query the current value of > the DTLS retransmit timer. This would be very useful for nonblocking > operations. Without such knowledge one has to poll the handshake layer > every so often, because it might want to retransmit something. > Extracting the exact value would make polling unnecessary, since one > could simply set the select() or similar timeout to that value. So would a function that extracts the remaining time for a retransmission be enough on that use case? regards, Nikos From s_buckhe at cs.uni-kl.de Sat Feb 18 01:33:39 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 18 Feb 2012 01:33:39 +0100 Subject: Function to get current dtls retransmit timeout In-Reply-To: <4F3D9D6F.6010704@cs.uni-kl.de> References: <4F3D9D6F.6010704@cs.uni-kl.de> Message-ID: <4F3EF1E3.9070104@cs.uni-kl.de> Regarding gnutls_dtls_get_timeout. I updates my stress test to use it when polling nonblocking sockets, and I found a bug. Apparently, any gnutls operation that can update the retransmit timer of a nonblocking socket will do so when executed, regardless of the current timer state. For example, initiating a handshake and calling gnutls_handshake() every 10ms will double the current retransmit timer on every call. I'm trying to fix it right now, but first attempts have, again, proven unsuccessful. From s_buckhe at cs.uni-kl.de Sat Feb 18 03:22:14 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 18 Feb 2012 03:22:14 +0100 Subject: [Patch] Don't update DTLS retransmit timer too often Message-ID: <4F3F0B56.10403@cs.uni-kl.de> Currently, when the user calls a handshake function on nonblocking DTLS sessions with no data available, the retransmit timers are updated without condition in _dtls_wait_and_retransmit. In that case, _dtls_transmit is also called, and if _dtls_transmit detects a flight timeout, the timer is updated again. This not only slows down - or outright disables - flight loss recovery. -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls.patch Type: text/x-patch Size: 293 bytes Desc: not available URL: From nmav at gnutls.org Sat Feb 18 11:04:29 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 18 Feb 2012 11:04:29 +0100 Subject: [Patch] Don't update DTLS retransmit timer too often In-Reply-To: <4F3F0B56.10403@cs.uni-kl.de> References: <4F3F0B56.10403@cs.uni-kl.de> Message-ID: <4F3F77AD.4070708@gnutls.org> On 02/18/2012 03:22 AM, Sean Buckheister wrote: > Currently, when the user calls a handshake function on nonblocking DTLS > sessions with no data available, the retransmit timers are updated > without condition in _dtls_wait_and_retransmit. In that case, > _dtls_transmit is also called, and if _dtls_transmit detects a flight > timeout, the timer is updated again. This not only slows down - or > outright disables - flight loss recovery. Thanks. This code is for the last flight only. Did you only notice the timer update issues on this flight? regards, Nikos From simon at josefsson.org Sat Feb 18 13:01:24 2012 From: simon at josefsson.org (Simon Josefsson) Date: Sat, 18 Feb 2012 13:01:24 +0100 Subject: Compiling gnutls on android In-Reply-To: <33320492.post@talk.nabble.com> (supanerd's message of "Tue, 14 Feb 2012 00:55:21 -0800 (PST)") References: <33297793.post@talk.nabble.com> <87vcnbszyq.fsf@latte.josefsson.org> <33320492.post@talk.nabble.com> Message-ID: <87pqdcxsdn.fsf@latte.josefsson.org> supanerd writes: > Thanks for answering. Could you be more specific on what "C stuff" u used for > the porting please :)? The compiler I used was the Android NDK: http://developer.android.com/sdk/ndk/index.html The software I helped port was GnuPG, although I focused only on the gnulib aspect. Still, that brief experience with the Android NDK left me with the impression that porting other C libraries, like GnuTLS, shouldn't be that much of a problem. /Simon > Simon Josefsson-2 wrote: >> >> supanerd writes: >> >>> HI, i have been wanting to compile Gnutls for android, but it seems that >>> no >>> one has taken interest in such a task as there is almost nothing on the >>> internet about this. May i know if anyone here has ever tried this? What >>> are >>> the challenges and difficulties that may potential arise? >> >> It should be possible, I did some porting of other gnulib-using C stuff >> to Android and while there were problems, they are usually solvable with >> some tweaking. I would start by getting the dependencies to build (gmp, >> nettle, libtasn1) and then try with GnuTLS as well. >> >> /Simon >> >> _______________________________________________ >> Gnutls-devel mailing list >> Gnutls-devel at gnu.org >> https://lists.gnu.org/mailman/listinfo/gnutls-devel >> >> From nmav at gnutls.org Sat Feb 18 14:34:49 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 18 Feb 2012 14:34:49 +0100 Subject: gnutls 3.0.10 Message-ID: <4F3FA8F9.1000204@gnutls.org> Hello, I've just released gnutls 3.0.13. This release fixes bugs and adds new features in the current stable branch. The main additions are, (1) a new helper interface to support trust on first use (SSH-like) authentication, (2) gnutls-cli and ocsptool support the on-line verification of a certificate using OCSP, (3) several updates in Datagram TLS handling of missed packets and retransmissions (thanks to work of Sean Buckheister). * Version 3.0.13 (released 2012-02-18) ** gnutls-cli: added the --ocsp option which will verify the peer's certificate with OCSP. ** gnutls-cli: added the --tofu and if specified, gnutls-cli will use an ssh-style authentication method. ** gnutls-cli: if no --x509cafile is provided a default is assumed (/etc/ssl/certs/ca-certificates.crt), if it exists. ** ocsptool: Added --ask parameter, to verify a certificate's status from an ocsp server. ** command line apps: Use gnu autogen (libopts) to parse command line arguments and template files. ** tests: Added stress test for DTLS packet losses and out-of-order receival. Contributed by Sean Buckheister. ** libgnutls: Several updates and corrections in the DTLS DTLS lost packet handling and retransmission timeouts. Report and patches by Sean Buckheister. ** libgnutls: Added new functions to easily allow the usage of a trust on first use (SSH-style) authentication. ** libgnutls: SUITEB128 and SUITEB192 priority strings account for the RFC6460 requirements. ** libgnutls: Added new security parameter GNUTLS_SEC_PARAM_LEGACY to account for security level of 96-bits. ** libgnutls: In client side if server does not advertise any known CAs and only a single certificate is set in the credentials, sent that one. ** libgnutls: Added functions to parse authority key identifiers when stored as a 'general name' and serial combo. ** libgnutls: Added function to force explicit reinitialization of PKCS #11 modules. This is required on the child process after a fork (if PKCS #11 functionality is desirable). ** libgnutls: Depend on p11-kit 0.11. ** API and ABI modifications: gnutls_dtls_get_timeout: Added gnutls_verify_stored_pubkey: Added gnutls_store_pubkey: Added gnutls_store_commitment: Added gnutls_x509_crt_get_authority_key_gn_serial: Added gnutls_x509_crl_get_authority_key_gn_serial: Added gnutls_pkcs11_reinit: Added gnutls_ecc_curve_list: Added gnutls_priority_certificate_type_list: Added gnutls_priority_sign_list: Added gnutls_priority_protocol_list: Added gnutls_priority_compression_list: Added gnutls_priority_ecc_curve_list: Added gnutls_tdb_init: Added gnutls_tdb_set_store_func: Added gnutls_tdb_set_store_commitment_func: Added gnutls_tdb_set_verify_func: Added gnutls_tdb_deinit: Added Getting the Software ==================== GnuTLS may be downloaded from one of the GNU mirror sites or directly >From . The list of GNU mirrors can be found at and a list of GnuTLS mirrors can be found at . Here are the XZ compressed sources: ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.13.tar.xz http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.13.tar.xz ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.13.tar.xz Here are OpenPGP detached signatures signed using key 0x96865171: ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.13.tar.xz.sig http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.13.tar.xz.sig ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.13.tar.xz.sig Note that it has been signed with my openpgp key: pub 3104R/96865171 2008-05-04 [expires: 2028-04-29] uid Nikos Mavrogiannopoulos gnutls.org> uid Nikos Mavrogiannopoulos gmail.com> sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02] sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02] regards, Nikos From ametzler at downhill.at.eu.org Sat Feb 18 15:23:37 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sat, 18 Feb 2012 15:23:37 +0100 Subject: gnutls 3.0.10 In-Reply-To: <4F3FA8F9.1000204@gnutls.org> References: <4F3FA8F9.1000204@gnutls.org> Message-ID: <20120218142337.GA2226@downhill.g.la> On 2012-02-18 Nikos Mavrogiannopoulos wrote: > I've just released gnutls 3.0.13. This release fixes bugs and adds [...] test mini-loss-time is taking ages to complete, should it really take 1 minute on an otherwise idle system? (SID)ametzler at argenau:/tmp/GNUTLS/gnutls-3.0.13$ time ./tests/mini-loss-time real 1m2.104s user 0m0.008s sys 0m0.000s cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' From nmav at gnutls.org Sat Feb 18 15:28:31 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 18 Feb 2012 15:28:31 +0100 Subject: gnutls 3.0.10 In-Reply-To: <20120218142337.GA2226@downhill.g.la> References: <4F3FA8F9.1000204@gnutls.org> <20120218142337.GA2226@downhill.g.la> Message-ID: On Sat, Feb 18, 2012 at 3:23 PM, Andreas Metzler wrote: > On 2012-02-18 Nikos Mavrogiannopoulos wrote: >> ?I've just released gnutls 3.0.13. This release fixes bugs and adds > [...] > test mini-loss-time is taking ages to complete, should it really take > 1 minute on an otherwise idle system? > (SID)ametzler at argenau:/tmp/GNUTLS/gnutls-3.0.13$ time ./tests/mini-loss-time Indeed. It actually checks whether the timeout in DTLS occurs in a minute :) regards, Nikos From home_pw at msn.com Sat Feb 18 15:46:33 2012 From: home_pw at msn.com (Peter Williams) Date: Sat, 18 Feb 2012 06:46:33 -0800 Subject: async OCSP over DTLS RE: gnutls 3.0.10 In-Reply-To: <4F3FA8F9.1000204@gnutls.org> References: <4F3FA8F9.1000204@gnutls.org> Message-ID: has anyone considered doing asynch ocsp (over DTLS...). Ie there are two class of connectionless channel, one of which (over which layer-7-unsigned OCSP itself passes) acts as an authorizer for tge completion of the other. The IETF spec reallly doesnt capture the original art of what becmae OCSP. Originally, a nightly job pre-signed lots of daily status messages (almost acting as a 1 line CRL). This was then replicated, much like a DNS zone. SSL endpoints then used an access protocol to access the replicant of the zone, and would ping it for the certificate status bit of a given keyed cert. If there was trust (e.g. an DTLS channel) between certificate-using system and replicant (and the asusmption the replicant had authenticated each signed status message during repliction, or their replicator's source endpoint in a further act of trusting). Another variant had replicants sending CRLs around to distribution points... the "last" of which creates a pool of individuall signed OCSP rsponse, ready to be quickly delivered over access protocols. what folks were not supposed to do was ping a online status responder, doing real time layer-7 signing. That was always deemed a crypto no-no for RSA (but this is what folks do). One can play with a large DTLS sesssion cache - where each sessionid is a surrogate for a cert's status. From s_buckhe at cs.uni-kl.de Sat Feb 18 17:04:38 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 18 Feb 2012 17:04:38 +0100 Subject: [Patch] Don't update DTLS retransmit timer too often In-Reply-To: <4F3F77AD.4070708@gnutls.org> References: <4F3F0B56.10403@cs.uni-kl.de> <4F3F77AD.4070708@gnutls.org> Message-ID: <4F3FCC16.5090302@cs.uni-kl.de> > Thanks. This code is for the last flight only. Did you only notice the > timer update issues on this flight? I Have. The other flights behaved as expected, and still do. From ametzler at downhill.at.eu.org Sat Feb 18 19:28:34 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sat, 18 Feb 2012 19:28:34 +0100 Subject: gnutls 3.0.10 In-Reply-To: <4F3FA8F9.1000204@gnutls.org> References: <4F3FA8F9.1000204@gnutls.org> Message-ID: <20120218182834.GB2007@downhill.g.la> On 2012-02-18 Nikos Mavrogiannopoulos wrote: [...] > ** command line apps: Use gnu autogen (libopts) to parse command > line arguments and template files. [...] Hello, This seems to be slightly broken: a) If there is no local installation of autoopts-config/libopts.so running gnutls' make install gives you /usr/lib/libopts.so.25.11.2 and the cmdline utilities are linked against it. b) With a local $libdir/libopts.so and autoopts-config (25.10.0) I get a build error: ------------------------------- make[4]: Entering directory `/tmp/GNUTLS/gnutls-3.0.13/src' /bin/bash ../libtool --tag=CC --mode=compile gcc -std=gnu99 -DHAVE_CONFIG_H -I. -I.. -I./../gl -I./../gl -I./../lib/includes -I./../lib/includes -I./../extra/includes -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -Werror=format-security -Wall -c -o libcmd_serv_la-serv-args.lo `test -f 'serv-args.c' || echo './'`serv-args.c libtool: compile: gcc -std=gnu99 -DHAVE_CONFIG_H -I. -I.. -I./../gl -I./../gl -I./../lib/includes -I./../lib/includes -I./../extra/includes -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -Werror=format-security -Wall -c serv-args.c -fPIC -DPIC -o .libs/libcmd_serv_la-serv-args.o In file included from serv-args.c:49:0: serv-args.h:62:3: error: #error option template version mismatches autoopts/options.h header serv-args.h:63:3: error: unknown type name 'Choke' serv-args.h:63:11: error: expected '=', ',', ';', 'asm' or '__attribute__' before '.' token ------------------------------- I think the correct behavior for a) is to build and link against a local helper library (noinst_LTLIBRARIES ...) instead of installing a shared library to $libdir. OTOH (b) if libopts is locally installed the respective autogenerated files (serv-args.h) should also be regenerated instead of breaking compilation. I will take a look at this tomorrow. (Unless weather permits snowboarding.) cu andreas From a.radke at arcor.de Sat Feb 18 19:48:07 2012 From: a.radke at arcor.de (Andreas Radke) Date: Sat, 18 Feb 2012 19:48:07 +0100 Subject: gnutls 3.0.10 In-Reply-To: <4F3FA8F9.1000204@gnutls.org> References: <4F3FA8F9.1000204@gnutls.org> Message-ID: <20120218194807.2da00cb9@laptop64.home> make check hangs for all time (half an hour and more) until I break it at this point here now: PASS: testcerts ================== All 2 tests passed ================== make[3]: Leaving directory `/build/src/gnutls-3.0.13/tests/openpgp-certs' make[2]: Leaving directory `/build/src/gnutls-3.0.13/tests/openpgp-certs' make[1]: Leaving directory `/build/src/gnutls-3.0.13/tests' make[1]: Entering directory `/build/src/gnutls-3.0.13' make[1]: Nothing to be done for `check-am'. make[1]: Leaving directory `/build/src/gnutls-3.0.13' GEN public-submodule-commit ^C ==> ERROR: Aborted by user! Exiting... ==1136== 16,464 bytes in 1 blocks are definitely lost in loss record 21 of 22 ==1136== at 0x4C28024: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==1136== by 0x4E5549A: _mbuffer_alloc (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E56381: _gnutls_io_read_buffered (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E51A13: _gnutls_recv_in_buffers (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E57943: _gnutls_handshake_io_recv_int (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E5A8D7: _gnutls_recv_handshake (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E5EACE: _gnutls_recv_server_kx_message (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E5C979: _gnutls_handshake_client (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x4E5CCCF: gnutls_handshake (in /build/src/gnutls-3.0.13/lib/.libs/libgnutls.so.28.6.0) ==1136== by 0x40180E: doit (in /build/src/gnutls-3.0.13/tests/mini-loss-time) ==1136== by 0x401194: main (in /build/src/gnutls-3.0.13/tests/mini-loss-time) ==1136== any idea? -Andy ArchLinux From s_buckhe at cs.uni-kl.de Sat Feb 18 20:17:01 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 18 Feb 2012 20:17:01 +0100 Subject: gnutls 3.0.10 In-Reply-To: <20120218194807.2da00cb9@laptop64.home> References: <4F3FA8F9.1000204@gnutls.org> <20120218194807.2da00cb9@laptop64.home> Message-ID: <4F3FF92D.3080603@cs.uni-kl.de> > make check hangs for all time (half an hour and more) Can't confirm. All tests run and complete in less than 20 minutes total, of which tests/dtls takes up a large chunk. > until I break it at this point here now: [...] > any idea? Could you strace that process and see whether it/it's children deadlock somehow? > ArchLinux ++ From s_buckhe at cs.uni-kl.de Sun Feb 19 03:18:55 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 19 Feb 2012 03:18:55 +0100 Subject: dtls-stress final Message-ID: <4F405C0F.5050301@cs.uni-kl.de> Hi, this should be the final version of dtls-stress. All features one could wish for are included now, including batch handling for tests by their id, tests for the full handshake sequence, adjustable timeouts, and many more. The exit code of the main program now contains information about the test runs (not only the log it produces), and error handling for syscalls has been added in many places. I have also found that the default retransmit timeout of one second causes quite a few tests to fail with low handshake timeouts, while they work fine with 100ms retransmit timeout. Since this tests models a very hostile network, I have decreased the default retransmit timeout to 100ms to save time. -- Sean -------------- next part -------------- A non-text attachment was scrubbed... Name: dtls-stress.c Type: text/x-csrc Size: 36762 bytes Desc: not available URL: From nmav at gnutls.org Sun Feb 19 12:00:45 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 19 Feb 2012 12:00:45 +0100 Subject: gnutls 3.0.10 In-Reply-To: <20120218182834.GB2007@downhill.g.la> References: <4F3FA8F9.1000204@gnutls.org> <20120218182834.GB2007@downhill.g.la> Message-ID: <4F40D65D.2090002@gnutls.org> On 02/18/2012 07:28 PM, Andreas Metzler wrote: > On 2012-02-18 Nikos Mavrogiannopoulos wrote: > [...] >> ** command line apps: Use gnu autogen (libopts) to parse command >> line arguments and template files. > [...] > Hello, > This seems to be slightly broken: > a) If there is no local installation of autoopts-config/libopts.so > running gnutls' make install gives you /usr/lib/libopts.so.25.11.2 and > the cmdline utilities are linked against it. Ouch, I never noticed that. I've committed a fix and reported it as a bug to libopts. http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=5c05181a979d4ddd92ec03a90ce19fb1e17628cd https://sourceforge.net/tracker/?func=detail&aid=3489352&group_id=3593&atid=103593 > b) With a local $libdir/libopts.so and autoopts-config (25.10.0) I get > a build error: Do you mean by specifying --enable-local-libopts and having libopts installed as well? It could be a header conflict with the installed and the bundled. > OTOH (b) if libopts is locally installed the respective autogenerated > files (serv-args.h) should also be regenerated instead of breaking > compilation. > I will take a look at this tomorrow. (Unless weather permits > snowboarding.) The problem is that libopts might be there but not autogen. If you find any possible solutions to that let me know! regards, Nikos From nmav at gnutls.org Sun Feb 19 12:09:14 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 19 Feb 2012 12:09:14 +0100 Subject: dtls-stress final In-Reply-To: <4F405C0F.5050301@cs.uni-kl.de> References: <4F405C0F.5050301@cs.uni-kl.de> Message-ID: <4F40D85A.4020003@gnutls.org> On 02/19/2012 03:18 AM, Sean Buckheister wrote: > Hi, > > this should be the final version of dtls-stress. All features one could > wish for are included now, including batch handling for tests by their > id, tests for the full handshake sequence, adjustable timeouts, and many > more. The exit code of the main program now contains information about > the test runs (not only the log it produces), and error handling for > syscalls has been added in many places. > > I have also found that the default retransmit timeout of one second > causes quite a few tests to fail with low handshake timeouts, while they > work fine with 100ms retransmit timeout. Since this tests models a very > hostile network, I have decreased the default retransmit timeout to > 100ms to save time. Thanks applied. Did you notice any particular suspicious cases to be tested? regards, Nikos From ametzler at downhill.at.eu.org Sun Feb 19 13:49:18 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sun, 19 Feb 2012 13:49:18 +0100 Subject: gnutls 3.0.10 In-Reply-To: <4F40D65D.2090002@gnutls.org> References: <4F3FA8F9.1000204@gnutls.org> <20120218182834.GB2007@downhill.g.la> <4F40D65D.2090002@gnutls.org> Message-ID: <20120219124918.GA2053@downhill.g.la> On 2012-02-19 Nikos Mavrogiannopoulos wrote: > On 02/18/2012 07:28 PM, Andreas Metzler wrote: > > On 2012-02-18 Nikos Mavrogiannopoulos wrote: > > [...] > >> ** command line apps: Use gnu autogen (libopts) to parse command > >> line arguments and template files. > > [...] > > Hello, > > This seems to be slightly broken: > > a) If there is no local installation of autoopts-config/libopts.so > > running gnutls' make install gives you /usr/lib/libopts.so.25.11.2 and > > the cmdline utilities are linked against it. > Ouch, I never noticed that. I've committed a fix and reported it as a > bug to libopts. > http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=5c05181a979d4ddd92ec03a90ce19fb1e17628cd > https://sourceforge.net/tracker/?func=detail&aid=3489352&group_id=3593&atid=103593 I complete concur with you here. > > b) With a local $libdir/libopts.so and autoopts-config (25.10.0) I get > > a build error: > Do you mean by specifying --enable-local-libopts and having libopts > installed as well? It could be a header conflict with the installed > and the bundled. It happens without specifying any extra options, ./configure automatically finds autoopts-config and uses it to locate the installed versions. > > OTOH (b) if libopts is locally installed the respective autogenerated > > files (serv-args.h) should also be regenerated instead of breaking > > compilation. > > I will take a look at this tomorrow. (Unless weather permits > > snowboarding.) > The problem is that libopts might be there but not autogen. If you find > any possible solutions to that let me know! For the time being I am using this hack in Debian: # force regeneration of autogen-ed files. for i in `grep -l AutoGen-ed src/*.c` ; do \ t=`basename $$i .c` ;\ rm -v $$i src/$$t.h;\ done The problem really does not suggest a tidy resolution to me either. cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' From a.radke at arcor.de Sun Feb 19 14:34:24 2012 From: a.radke at arcor.de (Andreas Radke) Date: Sun, 19 Feb 2012 14:34:24 +0100 Subject: gnutls 3.0.10 In-Reply-To: <4F3FF92D.3080603@cs.uni-kl.de> References: <4F3FA8F9.1000204@gnutls.org> <20120218194807.2da00cb9@laptop64.home> <4F3FF92D.3080603@cs.uni-kl.de> Message-ID: <20120219143424.1e458ca9@laptop64.home> Am Sat, 18 Feb 2012 20:17:01 +0100 schrieb Sean Buckheister : > Could you strace that process and see whether it/it's children > deadlock somehow? Does this help? Attaching a strace log when running "strace -o strace.out make check". -Andy -------------- next part -------------- A non-text attachment was scrubbed... Name: strace.out Type: application/octet-stream Size: 207853 bytes Desc: not available URL: From ametzler at downhill.at.eu.org Sun Feb 19 15:19:18 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sun, 19 Feb 2012 15:19:18 +0100 Subject: mini-loss-time does not close output on exit Message-ID: <20120219141918.GB2053@downhill.g.la> Hello, mini-loss-time breaks redirecting stdout/err (e.g. to get a buildlog), it seems to keep stdout open even after exiting, therefore mini-loss-time | tee /tmp/foo never exits. cu andreas From s_buckhe at cs.uni-kl.de Sun Feb 19 17:06:25 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 19 Feb 2012 17:06:25 +0100 Subject: dtls-stress final In-Reply-To: <4F40D85A.4020003@gnutls.org> References: <4F405C0F.5050301@cs.uni-kl.de> <4F40D85A.4020003@gnutls.org> Message-ID: <4F411E01.8030007@cs.uni-kl.de> > Thanks applied. Did you notice any particular suspicious cases to be tested? No, I haven't looked out for that. During the runs I just noticed lots and lots of failures, lowered the timeout, and suddenly they were gone. From nmav at gnutls.org Sun Feb 19 19:52:31 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 19 Feb 2012 19:52:31 +0100 Subject: mini-loss-time does not close output on exit In-Reply-To: <20120219141918.GB2053@downhill.g.la> References: <20120219141918.GB2053@downhill.g.la> Message-ID: <4F4144EF.7010108@gnutls.org> On 02/19/2012 03:19 PM, Andreas Metzler wrote: > Hello, > > mini-loss-time breaks redirecting stdout/err (e.g. to get a buildlog), it > seems to keep stdout open even after exiting, therefore > > mini-loss-time | tee /tmp/foo > never exits. Would this patch solve that? http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=642e6b5ca996325dc0ca6401a3b87039408b2585 regards, Nikos From nmav at gnutls.org Sun Feb 19 19:54:59 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 19 Feb 2012 19:54:59 +0100 Subject: gnutls 3.0.10 In-Reply-To: <20120219124918.GA2053@downhill.g.la> References: <4F3FA8F9.1000204@gnutls.org> <20120218182834.GB2007@downhill.g.la> <4F40D65D.2090002@gnutls.org> <20120219124918.GA2053@downhill.g.la> Message-ID: <4F414583.5090509@gnutls.org> On 02/19/2012 01:49 PM, Andreas Metzler wrote: >>> I will take a look at this tomorrow. (Unless weather permits >>> snowboarding.) > >> The problem is that libopts might be there but not autogen. If you find >> any possible solutions to that let me know! > > For the time being I am using this hack in Debian: > # force regeneration of autogen-ed files. > for i in `grep -l AutoGen-ed src/*.c` ; do \ > t=`basename $$i .c` ;\ > rm -v $$i src/$$t.h;\ > done > The problem really does not suggest a tidy resolution to me either. I've also reported that to autogen upstream. https://sourceforge.net/tracker/?func=detail&aid=3489380&group_id=3593&atid=103593 regards, Nikos From nmav at gnutls.org Sun Feb 19 23:29:56 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 19 Feb 2012 23:29:56 +0100 Subject: gnutls 3.0.10 In-Reply-To: <20120219143424.1e458ca9@laptop64.home> References: <4F3FA8F9.1000204@gnutls.org> <20120218194807.2da00cb9@laptop64.home> <4F3FF92D.3080603@cs.uni-kl.de> <20120219143424.1e458ca9@laptop64.home> Message-ID: <4F4177E4.8070206@gnutls.org> On 02/19/2012 02:34 PM, Andreas Radke wrote: > Am Sat, 18 Feb 2012 20:17:01 +0100 > schrieb Sean Buckheister : > > >> Could you strace that process and see whether it/it's children >> deadlock somehow? > > Does this help? Attaching a strace log when running > "strace -o strace.out make check". No unfortunately not. Could you try running the tests/mini-loss-time application directly and if it still stucks try the strace? btw. were you redirecting the output in a file? In that case would this patch solve the issue you see? http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=642e6b5ca996325dc0ca6401a3b87039408b2585 regards, Nikos From ametzler at downhill.at.eu.org Mon Feb 20 19:28:04 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Mon, 20 Feb 2012 19:28:04 +0100 Subject: mini-loss-time does not close output on exit In-Reply-To: <4F4144EF.7010108@gnutls.org> References: <20120219141918.GB2053@downhill.g.la> <4F4144EF.7010108@gnutls.org> Message-ID: <20120220182804.GA2971@downhill.g.la> On 2012-02-19 Nikos Mavrogiannopoulos wrote: > On 02/19/2012 03:19 PM, Andreas Metzler wrote: >> mini-loss-time breaks redirecting stdout/err (e.g. to get a buildlog), it >> seems to keep stdout open even after exiting, therefore >> mini-loss-time | tee /tmp/foo >> never exits. > Would this patch solve that? > http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=642e6b5ca996325dc0ca6401a3b87039408b2585 Yes, it worked for me. Thank you. cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' From ametzler at downhill.at.eu.org Tue Feb 21 18:10:26 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Tue, 21 Feb 2012 18:10:26 +0100 Subject: tests/mini-loss fails on kfree-* Message-ID: <20120221171026.GA1982@downhill.g.la> Hello, On kfree-* (tested on kfree-i386 and kfree-amd64) tests/mini-loss does not complete: ---------------------- (sid)ametzler at asdfasdf:~/GNUTLS/gnutls28-3.0.13$ ./tests/mini-loss --verbose Will discard client packet 1 server|<4>| REC[0x616cb0]: Allocating epoch #0 server|<2>| ASSERT: gnutls_constate.c:717 server|<4>| REC[0x616cb0]: Allocating epoch #1 client|<4>| REC[0x616cb0]: Allocating epoch #0 client|<2>| ASSERT: gnutls_constate.c:717 client|<4>| REC[0x616cb0]: Allocating epoch #1 client|<3>| HSK[0x616cb0]: Keeping ciphersuite: ECDH_ANON_AES_128_CBC_SHA1 client|<3>| HSK[0x616cb0]: Keeping ciphersuite: ECDH_ANON_AES_256_CBC_SHA1 client|<3>| HSK[0x616cb0]: Keeping ciphersuite: ECDH_ANON_3DES_EDE_CBC_SHA1 client|<3>| EXT[0x616cb0]: Sending extension SAFE RENEGOTIATION (1 bytes) client|<3>| EXT[0x616cb0]: Sending extension SUPPORTED ECC (12 bytes) client|<3>| EXT[0x616cb0]: Sending extension SUPPORTED ECC POINT FORMATS (2 bytes) client|<3>| HSK[0x616cb0]: CLIENT HELLO was queued [87 bytes] client|<7>| HWRITE: enqueued [CLIENT HELLO] 87. Total 87 bytes. client|<7>| HWRITE FLUSH: 87 bytes in buffer. client|<6>| DTLS[0x616cb0]: Start of flight transmission. client|<6>| DTLS[0x616cb0]: Sending Packet[0] fragment CLIENT HELLO(1) with length: 75, offset: 0, fragment length: 75 client|<4>| REC[0x616cb0]: Preparing Packet Handshake(22) with length: 87 client|<9>| ENC[0x616cb0]: cipher: NULL, MAC: MAC-NULL, Epoch: 0 client|<7>| WRITE: enqueued 100 bytes for 0x4. Total 100 bytes. client|<4>| REC[0x616cb0]: Sent Packet[1] Handshake(22) with length: 100 client|<7>| WRITE FLUSH: 100 bytes in buffer. Discarding packet 1: Client Hello client|<7>| WRITE: wrote 100 bytes, 0 bytes left. client|<2>| ASSERT: gnutls_buffers.c:629 client|<2>| ASSERT: gnutls_dtls.c:365 client|<6>| DTLS[0x616cb0]: End of flight transmission. client|<2>| ASSERT: gnutls_handshake.c:2455 client: Handshake failed GnuTLS error: Error in the pull function. server|<2>| ASSERT: gnutls_buffers.c:971 ---------------------- The test just hangs at this point, it does not exit. cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' From nmav at gnutls.org Tue Feb 21 20:11:38 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Tue, 21 Feb 2012 20:11:38 +0100 Subject: tests/mini-loss fails on kfree-* In-Reply-To: <20120221171026.GA1982@downhill.g.la> References: <20120221171026.GA1982@downhill.g.la> Message-ID: <4F43EC6A.7020601@gnutls.org> On 02/21/2012 06:10 PM, Andreas Metzler wrote: > Hello, > > On kfree-* (tested on kfree-i386 and kfree-amd64) tests/mini-loss > does not complete: I also see the error but I cannot figure out why. It seems select reports EINVAL in the code below, but I cannot see any reason for that. Any freebsd experts? http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=blob;f=lib/system.c;hb=HEAD#l120 regards, Nikos From mrsam at courier-mta.com Thu Feb 23 00:13:04 2012 From: mrsam at courier-mta.com (Sam Varshavchik) Date: Wed, 22 Feb 2012 18:13:04 -0500 Subject: Memory leak in =?UTF-8?Q?initialize=5Fautomatic=5Fp11=5Fkit()?= Message-ID: Valgrind is complaining about a minor memory leak. Looks like it's happening only once, on initialization. But, it's still a leak. ==21602== at 0x4A074CD: malloc (vg_replace_malloc.c:236) ==21602== by 0x33D4486A81: strdup (in /lib64/libc-2.14.90.so) ==21602== by 0x33DB805907: p11_kit_registered_module_to_name (in /usr/lib64/libp11-kit.so.0.0.0) ==21602== by 0x3F70C48524: gnutls_pkcs11_init (in /usr/lib64/libgnutls.so.26.21.8) Looking at the code, p11_kit_registered_module_to_name() returns a malloced buffer, which the caller seems to be responsible for freeing, and initialize_automatic_p11_kit() does not do that. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 198 bytes Desc: not available URL: From nmav at gnutls.org Thu Feb 23 08:44:52 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Thu, 23 Feb 2012 08:44:52 +0100 Subject: Memory leak in initialize_automatic_p11_kit() In-Reply-To: References: Message-ID: <4F45EE74.2060103@gnutls.org> On 02/23/2012 12:13 AM, Sam Varshavchik wrote: > Valgrind is complaining about a minor memory leak. Looks like it's > happening only once, on initialization. But, it's still a leak. > > ==21602== at 0x4A074CD: malloc (vg_replace_malloc.c:236) > ==21602== by 0x33D4486A81: strdup (in /lib64/libc-2.14.90.so) > ==21602== by 0x33DB805907: p11_kit_registered_module_to_name (in > /usr/lib64/libp11-kit.so.0.0.0) > ==21602== by 0x3F70C48524: gnutls_pkcs11_init (in > /usr/lib64/libgnutls.so.26.21.8) > > Looking at the code, p11_kit_registered_module_to_name() returns a > malloced buffer, which the caller seems to be responsible for freeing, > and initialize_automatic_p11_kit() does not do that. Thank you. Corrected. regards, Nikos From nmav at gnutls.org Fri Feb 24 17:24:47 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Fri, 24 Feb 2012 17:24:47 +0100 Subject: gnutls 3.0.14 Message-ID: <4F47B9CF.6080102@gnutls.org> Hello, I've just released gnutls 3.0.14. This is a bug-fix release on the current stable branch. * Version 3.0.14 (released 2012-02-24) ** command line apps: Included libopts doesn't get installed by default. ** libgnutls: Eliminate double free on wrongly formatted certificate list. Reported by Remi Gacogne. ** libgnutls: cryptodev code corrected, updated to account for hashes and GCM mode. ** libgnutls: Eliminated memory leak in PCKS #11 initialization. Report and fix by Sam Varshavchik. ** API and ABI modifications: No changes since last version. Getting the Software ==================== GnuTLS may be downloaded from one of the GNU mirror sites or directly >From . The list of GNU mirrors can be found at and a list of GnuTLS mirrors can be found at . Here are the XZ compressed sources: ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.14.tar.xz http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.14.tar.xz ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.14.tar.xz Here are OpenPGP detached signatures signed using key 0x96865171: ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.14.tar.xz.sig http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.14.tar.xz.sig ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.14.tar.xz.sig Note that it has been signed with my openpgp key: pub 3104R/96865171 2008-05-04 [expires: 2028-04-29] uid Nikos Mavrogiannopoulos gnutls.org> uid Nikos Mavrogiannopoulos gmail.com> sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02] sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02] regards, Nikos From INVALID.NOREPLY at gnu.org Fri Feb 24 17:29:31 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Fri, 24 Feb 2012 16:29:31 +0000 Subject: [sr #107954] Fails to connect to irc.chatspike.net:6697: Handshake has failed In-Reply-To: <20120211-111329.sv8049.98488@savannah.gnu.org> References: <20120211-102913.sv8049.18917@savannah.gnu.org> <20120211-114813.sv707.16319@savannah.gnu.org> <20120211-111329.sv8049.98488@savannah.gnu.org> Message-ID: <20120224-182931.sv707.12488@savannah.gnu.org> Update of sr #107954 (project gnutls): Status: None => Done Assigned to: None => nmav Open/Closed: Open => Closed _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From INVALID.NOREPLY at gnu.org Fri Feb 24 17:29:41 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Fri, 24 Feb 2012 16:29:41 +0000 Subject: [sr #107948] DTLS handshake deadlocks on packet loss In-Reply-To: <20120210-220656.sv0.2964@savannah.gnu.org> References: <20120206-142105.sv0.46528@savannah.gnu.org> <20120207-103401.sv0.1484@savannah.gnu.org> <20120207-203615.sv707.84036@savannah.gnu.org> <20120207-215153.sv0.63062@savannah.gnu.org> <20120208-000803.sv707.68738@savannah.gnu.org> <20120208-115556.sv707.71319@savannah.gnu.org> <20120208-144942.sv0.51264@savannah.gnu.org> <20120208-192024.sv707.98140@savannah.gnu.org> <20120208-184224.sv0.63645@savannah.gnu.org> <20120208-185145.sv0.67130@savannah.gnu.org> <20120209-005216.sv707.37163@savannah.gnu.org> <20120208-234042.sv0.74959@savannah.gnu.org> <20120209-090207.sv0.89887@savannah.gnu.org> <20120209-171931.sv0.493@savannah.gnu.org> <20120210-205104.sv707.84164@savannah.gnu.org> <20120210-220656.sv0.2964@savannah.gnu.org> Message-ID: <20120224-182941.sv707.97247@savannah.gnu.org> Update of sr #107948 (project gnutls): Status: Ready For Test => Done Open/Closed: Open => Closed _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From latze at angry-red-pla.net Fri Feb 24 18:05:38 2012 From: latze at angry-red-pla.net (Carolin Latze) Date: Fri, 24 Feb 2012 18:05:38 +0100 Subject: patch to documentation on how to add a custom supplemental data message Message-ID: <4F47C362.5090603@angry-red-pla.net> Hi all, finally - after 3 years (... :( ) - I wrote this section about how to add a custom supplemental data handshake message to GnuTLS. I checked the webpage but did not see how add the patch directly, which is why I attached it to this mail. Please let me know if this is not the correct way to do this Regards Carolin -------------- next part -------------- A non-text attachment was scrubbed... Name: suppDataDoc.patch Type: text/x-patch Size: 3079 bytes Desc: not available URL: From INVALID.NOREPLY at gnu.org Fri Feb 24 20:01:39 2012 From: INVALID.NOREPLY at gnu.org (Andoni Morales Alastruey) Date: Fri, 24 Feb 2012 19:01:39 +0000 Subject: [sr #107967] Add missing file to distribution tarball Message-ID: <20120224-190137.sv87248.96117@savannah.gnu.org> URL: Summary: Add missing file to distribution tarball Project: GnuTLS Submitted by: ylatuya Submitted on: vie 24 feb 2012 19:01:37 GMT Category: None Priority: 5 - Normal Severity: 3 - Normal Status: None Privacy: Public Assigned to: None Originator Email: Open/Closed: Open Discussion Lock: Any Operating System: None _______________________________________________________ Details: doc/scripts/getfuncs.pl is missing in the distribution tarball, generating these erros building the docs: echo "" > gnutls-api.texi-tmp for i in `../doc/scripts/getfuncs.pl <../lib/includes/gnutls/gnutls.h.in|sort|uniq`; do \ echo -n "Creating documentation for $i... " && \ ./scripts/gdoc -texinfo \ -function $i \ ../lib/*.c ../lib/*/*.c >> gnutls-api.texi-tmp 2>/dev/null && \ echo "ok"; \ done /bin/bash: line 6: ../doc/scripts/getfuncs.pl: No such file or directory Attached patch. _______________________________________________________ File Attachments: ------------------------------------------------------- Date: vie 24 feb 2012 19:01:37 GMT Name: 0001-Add-getfuncs.pl-file-to-EXTRA_DIST.patch Size: 765B By: ylatuya _______________________________________________________ Reply to this item at: _______________________________________________ Mensaje enviado v?a/por Savannah http://savannah.gnu.org/ From a.radke at arcor.de Fri Feb 24 21:46:44 2012 From: a.radke at arcor.de (Andreas Radke) Date: Fri, 24 Feb 2012 21:46:44 +0100 Subject: gnutls 3.0.14 In-Reply-To: <4F47B9CF.6080102@gnutls.org> References: <4F47B9CF.6080102@gnutls.org> Message-ID: <20120224214644.2d717e1e@laptop64.home> PASS: rsa-encrypt-decrypt ==24740== 16,464 bytes in 1 blocks are definitely lost in loss record 21 of 22 ==24740== at 0x4C28024: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==24740== by 0x4E5553A: _mbuffer_alloc (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E56421: _gnutls_io_read_buffered (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E51A13: _gnutls_recv_in_buffers (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E57A43: _gnutls_handshake_io_recv_int (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E5A9D7: _gnutls_recv_handshake (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E5EBBE: _gnutls_recv_server_kx_message (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E5CA79: _gnutls_handshake_client (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4E5CDCF: gnutls_handshake (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==24740== by 0x4018CE: doit (in /build/src/gnutls-3.0.14/tests/mini-loss-time) ==24740== by 0x401234: main (in /build/src/gnutls-3.0.14/tests/mini-loss-time) ==24740== I guess this shouldn't happen? Apart from this all tests get passed. -Andy ArchLinux From mhall at mhcomputing.net Fri Feb 24 23:33:26 2012 From: mhall at mhcomputing.net (Matthew Hall) Date: Fri, 24 Feb 2012 14:33:26 -0800 Subject: Bug in GnuTLS 3.0.11 signature_algorithms extension and others Message-ID: <20120224223326.GA16845@mhcomputing.net> Hello GnuTLS team, I believe I found a problem in the server-side implementation of the TLS 1.2 Signature Algorithms extension in GnuTLS 3.0.11. Here I provide some source code, gdb output, and gnutls-serv full debug output to explain what I believe is happening. When the client enables the signature_algorithms extension and sends the supported_signature_algorithms list, the session negotiation will always fail because GnuTLS's internal representation of its own supported_signature_algorithms list is always empty (this is stored in session->internals.priorities.sign_algo.algorithms). This causes the TLS 1.2 negotiation to fail when checking the CertificateVerify's DigitallySigned SignatureAndHashAlgorithm field because GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM will always be returned from _gnutls_session_sign_algo_enabled. My code and Wireshark notice that your CertificateRequest has a blank supported_signature_algorithms field, which I'm assuming is also copied from the session->internals.priorities.sign_algo. The same client code successfully connects to Java 7 JDK / JRE JSSE TLS 1.2 implementation without any issue, and Java successfully supports the extension. GnuTLS also works again, when I disable the extension. I think this narrows down the problem area. I think the code should either copy out the client algorithms which it also supports and which are allowed according to the Cipher String into the session->internals.priorities.sign_algo.algorithms. Or it could fill this sign_algo structure with some static data about every combination which it allows (this is what Java 7 does, when the user initializes the Cipher Suites / Export Rules / SSL Context). This will allow the handshake to proceed because something besides GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM will be returned. I also have a second problem I cannot email publicly because I think it could be used to create an exploit against the library. Do you have a PGP key I could use to send this other bug, and where should I send it? Regards, Matthew Hall P.S.: Another problem I found in lib/gnutls_int.h. This comment here is not accurate because many more debug messages appear when these defines are uncommented: /* * They are not needed any more. You can simply enable * the gnutls_log callback to get error descriptions. */ #define BUFFERS_DEBUG #define WRITE_DEBUG #define READ_DEBUG #define HANDSHAKE_DEBUG // Prints some information on handshake #define COMPRESSION_DEBUG #define DEBUG TLS 1.2 RFC: 7.4.1.4.1. Signature Algorithms The client uses the "signature_algorithms" extension to indicate to the server which signature/hash algorithm pairs may be used in digital signatures. The "extension_data" field of this extension contains a "supported_signature_algorithms" value. enum { none(0), md5(1), sha1(2), sha224(3), sha256(4), sha384(5), sha512(6), (255) } HashAlgorithm; enum { anonymous(0), rsa(1), dsa(2), ecdsa(3), (255) } SignatureAlgorithm; struct { HashAlgorithm hash; SignatureAlgorithm signature; } SignatureAndHashAlgorithm; SignatureAndHashAlgorithm supported_signature_algorithms<2..2^16-2>; PROBLEMATIC FUNCTION: /* Check if the given signature algorithm is supported. * This means that it is enabled by the priority functions, * and in case of a server a matching certificate exists. */ int _gnutls_session_sign_algo_enabled (gnutls_session_t session, gnutls_sign_algorithm_t sig) { unsigned i; int ret; gnutls_protocol_t ver = gnutls_protocol_get_version (session); sig_ext_st *priv; extension_priv_data_t epriv; ret = _gnutls_ext_get_session_data (session, GNUTLS_EXTENSION_SIGNATURE_ALGORITHMS, &epriv); if (ret < 0) { gnutls_assert (); return 0; } priv = epriv.ptr; if (!_gnutls_version_has_selectable_sighash (ver) || priv->sign_algorithms_size == 0) /* none set, allow all */ { return 0; } for (i = 0; i < session->internals.priorities.sign_algo.algorithms; i++) { if (session->internals.priorities.sign_algo.priority[i] == sig) { return 0; /* ok */ } } return GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM; } GDB OUTPUT: (gdb) print session->internals.priorities.sign_algo $15 = {priority = {0 }, algorithms = 0} (gdb) (gdb) print *priv $16 = {sign_algorithms = {GNUTLS_SIGN_RSA_MD5, GNUTLS_SIGN_RSA_SHA1, GNUTLS_SIGN_RSA_SHA256, GNUTLS_SIGN_UNKNOWN }, sign_algorithms_size = 3} (gdb) (gdb) print session->internals.priorities $17 = {cipher = {priority = {4, 7, 93, 5, 8, 94, 3, 2, 1, 0 }, algorithms = 9}, mac = {priority = {3, 6, 7, 200, 2, 0 }, algorithms = 5}, kx = {priority = {13, 12, 3, 2, 1, 0 }, algorithms = 5}, compression = {priority = { 1, 0 }, algorithms = 1}, protocol = {priority = {4, 3, 2, 1, 5, 0 }, algorithms = 5}, cert_type = { priority = {0 }, algorithms = 0}, sign_algo = { priority = {0 }, algorithms = 0}, supported_ecc = { priority = {5, 1, 2, 3, 4, 0 }, algorithms = 5}, no_extensions = 0, no_padding = 0, allow_large_records = 0, sr = SR_PARTIAL, ssl3_record_version = 0, server_precedence = 0, additional_verify_flags = 0} (gdb) GNUTLS-SERV DEBUG LOG: /usr/local/bin/gnutls-serv --priority NONE:+CIPHER-ALL:+NULL:+KX-ALL:+MAC-ALL:+COMP-NULL:+VERS-TLS-ALL:+CURVE-ALL:%LATEST_RECORD_VERSION --dhparams /home/mhall/certs/dhparams.pem --port 31337 --x509certfile /home/mhall/certs/server-cert.pem --x509keyfile /home/mhall/certs/server-key.pem --nodb --noticket --debug 2147483647 --echo |<2>| ASSERT: mpi.c:255 |<2>| ASSERT: gnutls_dh_primes.c:293 Read Diffie-Hellman parameters. Echo Server listening on IPv4 0.0.0.0 port 31337...done Echo Server listening on IPv6 :: port 31337...bind() failed: Address already in use |<4>| REC[0x8b1f770]: Allocating epoch #0 * Accepted connection from IPv4 127.0.0.1 port 55214 on Fri Feb 24 14:17:41 2012 |<2>| ASSERT: gnutls_constate.c:716 |<4>| REC[0x8b1f770]: Allocating epoch #1 |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: Got 5 bytes from 0x5 |<7>| READ: read 5 bytes from 0x5 |<7>| RB: Have 0 bytes into buffer. Adding 5 bytes. |<7>| RB: Requested 5 bytes |<4>| REC[0x8b1f770]: SSL 3.3 Handshake packet received. Length: 59 |<4>| REC[0x8b1f770]: Expected Packet Handshake(22) |<4>| REC[0x8b1f770]: Received Packet Handshake(22) with length: 59 |<7>| READ: Got 59 bytes from 0x5 |<7>| READ: read 59 bytes from 0x5 |<7>| RB: Have 5 bytes into buffer. Adding 59 bytes. |<7>| RB: Requested 64 bytes |<4>| REC[0x8b1f770]: Decrypted Packet[0] Handshake(22) with length: 59 |<6>| BUF[REC]: Inserted 59 bytes of Data(22) |<3>| HSK[0x8b1f770]: CLIENT HELLO was received. Length 55[55], frag offset 0, frag length: 55, sequence: 0 |<3>| HSK[0x8b1f770]: Client's version: 3.3 |<2>| ASSERT: gnutls_db.c:289 |<3>| EXT[0x8b1f770]: Parsing extension 'SIGNATURE ALGORITHMS/13' (8 bytes) |<3>| EXT[0x8b1f770]: rcvd signature algo (1.1) RSA-MD5 |<3>| EXT[0x8b1f770]: rcvd signature algo (2.1) RSA-SHA1 |<3>| EXT[0x8b1f770]: rcvd signature algo (4.1) RSA-SHA256 |<2>| ASSERT: server_name.c:301 |<3>| HSK[0x8b1f770]: Requested PK algorithm: RSA (1) -- ctype: X.509 (1) |<3>| HSK[0x8b1f770]: certificate[0] PK algorithm: RSA (1) - ctype: X.509 (1) |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_AES_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_AES_128_CBC_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_AES_128_GCM_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_AES_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_AES_256_CBC_SHA384 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_AES_256_GCM_SHA384 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_3DES_EDE_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_ECDSA_NULL_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_AES_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_AES_128_CBC_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_AES_128_GCM_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_AES_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_AES_256_GCM_SHA384 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_3DES_EDE_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: ECDHE_RSA_NULL_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_AES_128_CBC_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_CAMELLIA_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_AES_128_GCM_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_AES_256_CBC_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_CAMELLIA_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: DHE_RSA_3DES_EDE_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_AES_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_AES_128_CBC_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_CAMELLIA_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_AES_128_GCM_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_AES_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_AES_256_CBC_SHA256 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_CAMELLIA_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_3DES_EDE_CBC_SHA1 |<3>| HSK[0x8b1f770]: Removing ciphersuite: DHE_DSS_ARCFOUR_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_AES_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_AES_128_CBC_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_CAMELLIA_128_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_AES_128_GCM_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_AES_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_AES_256_CBC_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_CAMELLIA_256_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_3DES_EDE_CBC_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_ARCFOUR_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_ARCFOUR_MD5 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_NULL_SHA1 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_NULL_SHA256 |<3>| HSK[0x8b1f770]: Keeping ciphersuite: RSA_NULL_MD5 |<3>| HSK[0x8b1f770]: Requested cipher suites[size: 2]: |<3>| 0x00, 0x02 RSA_NULL_SHA1 |<3>| HSK[0x8b1f770]: Selected cipher suite: RSA_NULL_SHA1 |<3>| HSK[0x8b1f770]: Selected Compression Method: NULL |<3>| HSK[0x8b1f770]: Allowing unsafe initial negotiation |<3>| HSK[0x8b1f770]: SessionID: 6e491dd2f408fe81012c9fb7e864730e93035104c772de66830d4d2678c2d90c |<3>| HSK[0x8b1f770]: SERVER HELLO was queued [74 bytes] |<7>| HWRITE: enqueued [SERVER HELLO] 74. Total 74 bytes. |<3>| HSK[0x8b1f770]: CERTIFICATE was queued [830 bytes] |<7>| HWRITE: enqueued [CERTIFICATE] 830. Total 904 bytes. |<3>| HSK[0x8b1f770]: CERTIFICATE REQUEST was queued [12 bytes] |<7>| HWRITE: enqueued [CERTIFICATE REQUEST] 12. Total 916 bytes. |<3>| HSK[0x8b1f770]: SERVER HELLO DONE was queued [4 bytes] |<7>| HWRITE: enqueued [SERVER HELLO DONE] 4. Total 920 bytes. |<7>| HWRITE FLUSH: 920 bytes in buffer. |<4>| REC[0x8b1f770]: Preparing Packet Handshake(22) with length: 74 |<9>| ENC[0x8b1f770]: cipher: NULL, MAC: MAC-NULL, Epoch: 0 |<7>| WRITE: enqueued 79 bytes for 0x5. Total 79 bytes. |<4>| REC[0x8b1f770]: Sent Packet[1] Handshake(22) with length: 79 |<7>| HWRITE: wrote 1 bytes, 846 bytes left. |<4>| REC[0x8b1f770]: Preparing Packet Handshake(22) with length: 830 |<9>| ENC[0x8b1f770]: cipher: NULL, MAC: MAC-NULL, Epoch: 0 |<7>| WRITE: enqueued 835 bytes for 0x5. Total 914 bytes. |<4>| REC[0x8b1f770]: Sent Packet[2] Handshake(22) with length: 835 |<7>| HWRITE: wrote 1 bytes, 16 bytes left. |<4>| REC[0x8b1f770]: Preparing Packet Handshake(22) with length: 12 |<9>| ENC[0x8b1f770]: cipher: NULL, MAC: MAC-NULL, Epoch: 0 |<7>| WRITE: enqueued 17 bytes for 0x5. Total 931 bytes. |<4>| REC[0x8b1f770]: Sent Packet[3] Handshake(22) with length: 17 |<7>| HWRITE: wrote 1 bytes, 4 bytes left. |<4>| REC[0x8b1f770]: Preparing Packet Handshake(22) with length: 4 |<9>| ENC[0x8b1f770]: cipher: NULL, MAC: MAC-NULL, Epoch: 0 |<7>| WRITE: enqueued 9 bytes for 0x5. Total 940 bytes. |<4>| REC[0x8b1f770]: Sent Packet[4] Handshake(22) with length: 9 |<7>| HWRITE: wrote 1 bytes, 0 bytes left. |<7>| WRITE FLUSH: 940 bytes in buffer. |<7>| WRITE: wrote 940 bytes, 0 bytes left. |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: -1 returned from 0x5, errno=11 gerrno=0 |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: Got 5 bytes from 0x5 |<7>| READ: read 5 bytes from 0x5 |<7>| RB: Have 0 bytes into buffer. Adding 5 bytes. |<7>| RB: Requested 5 bytes |<4>| REC[0x8b1f770]: SSL 3.3 Handshake packet received. Length: 693 |<4>| REC[0x8b1f770]: Expected Packet Handshake(22) |<4>| REC[0x8b1f770]: Received Packet Handshake(22) with length: 693 |<7>| READ: Got 693 bytes from 0x5 |<7>| READ: read 693 bytes from 0x5 |<7>| RB: Have 5 bytes into buffer. Adding 693 bytes. |<7>| RB: Requested 698 bytes |<4>| REC[0x8b1f770]: Decrypted Packet[1] Handshake(22) with length: 693 |<6>| BUF[REC]: Inserted 693 bytes of Data(22) |<3>| HSK[0x8b1f770]: CERTIFICATE was received. Length 689[689], frag offset 0, frag length: 689, sequence: 0 |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: -1 returned from 0x5, errno=11 gerrno=0 |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: Got 5 bytes from 0x5 |<7>| READ: read 5 bytes from 0x5 |<7>| RB: Have 0 bytes into buffer. Adding 5 bytes. |<7>| RB: Requested 5 bytes |<4>| REC[0x8b1f770]: SSL 3.3 Handshake packet received. Length: 134 |<4>| REC[0x8b1f770]: Expected Packet Handshake(22) |<4>| REC[0x8b1f770]: Received Packet Handshake(22) with length: 134 |<7>| READ: Got 134 bytes from 0x5 |<7>| READ: read 134 bytes from 0x5 |<7>| RB: Have 5 bytes into buffer. Adding 134 bytes. |<7>| RB: Requested 139 bytes |<4>| REC[0x8b1f770]: Decrypted Packet[2] Handshake(22) with length: 134 |<6>| BUF[REC]: Inserted 134 bytes of Data(22) |<3>| HSK[0x8b1f770]: CLIENT KEY EXCHANGE was received. Length 130[130], frag offset 0, frag length: 130, sequence: 0 |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: -1 returned from 0x5, errno=11 gerrno=0 |<2>| ASSERT: gnutls_buffers.c:959 |<7>| READ: Got 5 bytes from 0x5 |<7>| READ: read 5 bytes from 0x5 |<7>| RB: Have 0 bytes into buffer. Adding 5 bytes. |<7>| RB: Requested 5 bytes |<4>| REC[0x8b1f770]: SSL 3.3 Handshake packet received. Length: 136 |<4>| REC[0x8b1f770]: Expected Packet Handshake(22) |<4>| REC[0x8b1f770]: Received Packet Handshake(22) with length: 136 |<7>| READ: Got 136 bytes from 0x5 |<7>| READ: read 136 bytes from 0x5 |<7>| RB: Have 5 bytes into buffer. Adding 136 bytes. |<7>| RB: Requested 141 bytes |<4>| REC[0x8b1f770]: Decrypted Packet[3] Handshake(22) with length: 136 |<6>| BUF[REC]: Inserted 136 bytes of Data(22) |<3>| HSK[0x8b1f770]: CERTIFICATE VERIFY was received. Length 132[132], frag offset 0, frag length: 132, sequence: 0 |<2>| ASSERT: cert.c:1696 |<2>| ASSERT: gnutls_handshake.c:2810 |<3>| HSK[0x8b1f770]: recv client certificate verify (-106) Error in handshake Error: The signature algorithm is not supported. |<4>| REC: Sending Alert[2|40] - Handshake failed |<4>| REC[0x8b1f770]: Preparing Packet Alert(21) with length: 2 |<9>| ENC[0x8b1f770]: cipher: NULL, MAC: MAC-NULL, Epoch: 0 |<7>| WRITE: enqueued 7 bytes for 0x5. Total 7 bytes. |<7>| WRITE FLUSH: 7 bytes in buffer. |<7>| WRITE: wrote 7 bytes, 0 bytes left. |<4>| REC[0x8b1f770]: Sent Packet[5] Alert(21) with length: 7 |<2>| ASSERT: gnutls_record.c:234 |<4>| REC[0x8b1f770]: Start of epoch cleanup |<4>| REC[0x8b1f770]: End of epoch cleanup |<4>| REC[0x8b1f770]: Epoch #0 freed |<4>| REC[0x8b1f770]: Epoch #1 freed From mhall at mhcomputing.net Sat Feb 25 03:59:47 2012 From: mhall at mhcomputing.net (Matthew Hall) Date: Fri, 24 Feb 2012 18:59:47 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug Message-ID: <20120225025947.GA17318@mhcomputing.net> While investigating some other bugs in GnuTLS I located this bug in the --debug=99999999 option in GnuTLS 3.0.14, which is not present in 3.0.11, due to some changes in the way that GnuTLS seems to handle its CLI options. It is possible the bug is caused by the AutoOpts library. It seems to be an issue with the format string or arg list used to attempt to report that the value passed to the --debug is out of the expected range up to 9999. The bug triggers on any value > 9999. Regards, Matthew Hall GDB OUTPUT: mhall at mhall-mini1:~/src$ gdb /usr/local/bin/gnutls-serv GNU gdb (GDB) 7.2-ubuntu Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-linux-gnu". For bug reporting instructions, please see: ... Reading symbols from /usr/local/bin/gnutls-serv...done. (gdb) set args (gdb) set args --debug=99999999 (gdb) run Starting program: /usr/local/bin/gnutls-serv --debug=99999999 [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0x00282b33 in _IO_vfprintf_internal (s=0xbfffed90, format=0x8067ad2 "%s error: %s option value ``%s'' is out of range.\n", ap=0xbffff428 "\263\370\377\277\022`\006\b\377\340\365\005\364\277\006\bh\364\377\277h\345\005\b\307\370\377\277\\\364\377\277?\006\bPh\006\b\240\315\006\b\314\364\377\277\377\340\365\005\364\277\006\b") at vfprintf.c:1614 1614 vfprintf.c: No such file or directory. in vfprintf.c (gdb) bt #0 0x00282b33 in _IO_vfprintf_internal (s=0xbfffed90, format=0x8067ad2 "%s error: %s option value ``%s'' is out of range.\n", ap=0xbffff428 "\263\370\377\277\022`\006\b\377\340\365\005\364\277\006\bh\364\377\277h\345\005\b\307\370\377\277\\\364\377\277?\006\bPh\006\b\240\315\006\b\314\364\377\277\377\340\365\005\364\277\006\b") at vfprintf.c:1614 #1 0x00284512 in buffered_vfprintf (s=0x39b580, format=0x5f5e0ff
, args=0xffffffff
) at vfprintf.c:2254 #2 0x0027f413 in _IO_vfprintf_internal (s=0x39b580, format=0x8067ad2 "%s error: %s option value ``%s'' is out of range.\n", ap=0xbffff428 "\263\370\377\277\022`\006\b\377\340\365\005\364\277\006\bh\364\377\277h\345\005\b\307\370\377\277\\\364\377\277?\006\bPh\006\b\240\315\006\b\314\364\377\277\377\340\365\005\364\277\006\b") at vfprintf.c:1306 #3 0x00289a8f in __fprintf (stream=0x39b580, format=0x8067ad2 "%s error: %s option value ``%s'' is out of range.\n") at fprintf.c:33 #4 0x0805e2e0 in optionShowRange (pOpts=0x806cda0, pOD=0x806c4e0, rng_table=0x8066850, rng_ct=1) at numeric.c:56 #5 0x080528b3 in doOptDebug (pOptions=0x806cda0, pOptDesc=0x806c4e0) at serv-args.c:1008 #6 0x08055400 in handle_opt (pOpts=0x806cda0, pOptState=0xbffff500) at autoopts.c:240 #7 0x08055927 in regular_opts (pOpts=0x806cda0) at autoopts.c:515 #8 0x08055b9b in optionProcess (pOpts=0x806cda0, argCt=2, argVect=0xbffff774) at autoopts.c:682 #9 0x0804f42f in cmd_parser (argc=2, argv=0xbffff774) at serv.c:1546 #10 0x0804d9d3 in main (argc=2, argv=0xbffff774) at serv.c:912 (gdb) From nmav at gnutls.org Sat Feb 25 09:02:39 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 09:02:39 +0100 Subject: Bug in GnuTLS 3.0.11 signature_algorithms extension and others In-Reply-To: <20120224223326.GA16845@mhcomputing.net> References: <20120224223326.GA16845@mhcomputing.net> Message-ID: <4F48959F.5040908@gnutls.org> On 02/24/2012 11:33 PM, Matthew Hall wrote: > Hello GnuTLS team, > > I believe I found a problem in the server-side implementation of the TLS 1.2 > Signature Algorithms extension in GnuTLS 3.0.11. Here I provide some source > code, gdb output, and gnutls-serv full debug output to explain what I believe > is happening. > > When the client enables the signature_algorithms extension and sends the > supported_signature_algorithms list, the session negotiation will always fail > because GnuTLS's internal representation of its own > supported_signature_algorithms list is always empty (this is stored in > session->internals.priorities.sign_algo.algorithms). > > This causes the TLS 1.2 negotiation to fail when checking the > CertificateVerify's DigitallySigned SignatureAndHashAlgorithm field because > GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM will always be returned from > _gnutls_session_sign_algo_enabled. > > My code and Wireshark notice that your CertificateRequest has a blank > supported_signature_algorithms field, which I'm assuming is also copied from > the session->internals.priorities.sign_algo. > > The same client code successfully connects to Java 7 JDK / JRE JSSE TLS 1.2 > implementation without any issue, and Java successfully supports the > extension. GnuTLS also works again, when I disable the extension. I think this > narrows down the problem area. > > I think the code should either copy out the client algorithms which it also > supports and which are allowed according to the Cipher String into the > session->internals.priorities.sign_algo.algorithms. > > Or it could fill this sign_algo structure with some static data about every > combination which it allows (this is what Java 7 does, when the user > initializes the Cipher Suites / Export Rules / SSL Context). > > This will allow the handshake to proceed because something besides > GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM will be returned. > > I also have a second problem I cannot email publicly because I think it could > be used to create an exploit against the library. Do you have a PGP key I > could use to send this other bug, and where should I send it? [...] > (gdb) print session->internals.priorities > $17 = {cipher = {priority = {4, 7, 93, 5, 8, 94, 3, 2, 1, > 0 }, algorithms = 9}, mac = {priority = {3, 6, 7, 200, > 2, 0 }, algorithms = 5}, kx = {priority = {13, 12, 3, > 2, 1, 0 }, algorithms = 5}, compression = {priority = { > 1, 0 }, algorithms = 1}, protocol = {priority = {4, 3, > 2, 1, 5, 0 }, algorithms = 5}, cert_type = { > priority = {0 }, algorithms = 0}, sign_algo = { > priority = {0 }, algorithms = 0}, supported_ecc = { > priority = {5, 1, 2, 3, 4, 0 }, algorithms = 5}, > no_extensions = 0, no_padding = 0, allow_large_records = 0, sr = SR_PARTIAL, > ssl3_record_version = 0, server_precedence = 0, additional_verify_flags = 0} > (gdb) > > GNUTLS-SERV DEBUG LOG: > > /usr/local/bin/gnutls-serv --priority NONE:+CIPHER-ALL:+NULL:+KX-ALL:+MAC-ALL:+COMP-NULL:+VERS-TLS-ALL:+CURVE-ALL:%LATEST_RECORD_VERSION --dhparams /home/mhall/certs/dhparams.pem --port 31337 --x509certfile /home/mhall/certs/server-cert.pem --x509keyfile /home/mhall/certs/server-key.pem --nodb --noticket --debug 2147483647 --echo Hello Matthew, I believe the issue you describe is because of the priority string you set. If you include +SIGN-ALL to the priority string you shouldn't have this issue. The predefined priority string names such as PERFORMANCE, NORMAL should also include a list of signature algorithms. If the documentation isn't clear on that, or if you still notice the issue under those priority strings please let me know. You can find our pgp keys at the bottom of http://www.gnu.org/software/gnutls/download.html regards, NIkos From nmav at gnutls.org Sat Feb 25 09:07:16 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 09:07:16 +0100 Subject: gnutls 3.0.14 In-Reply-To: <20120224214644.2d717e1e@laptop64.home> References: <4F47B9CF.6080102@gnutls.org> <20120224214644.2d717e1e@laptop64.home> Message-ID: <4F4896B4.4090605@gnutls.org> On 02/24/2012 09:46 PM, Andreas Radke wrote: > PASS: rsa-encrypt-decrypt > ==24740== 16,464 bytes in 1 blocks are definitely lost in loss record 21 of 22 > ==24740== at 0x4C28024: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) > ==24740== by 0x4E5553A: _mbuffer_alloc (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E56421: _gnutls_io_read_buffered (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E51A13: _gnutls_recv_in_buffers (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E57A43: _gnutls_handshake_io_recv_int (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E5A9D7: _gnutls_recv_handshake (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E5EBBE: _gnutls_recv_server_kx_message (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E5CA79: _gnutls_handshake_client (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4E5CDCF: gnutls_handshake (in /build/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > ==24740== by 0x4018CE: doit (in /build/src/gnutls-3.0.14/tests/mini-loss-time) > ==24740== by 0x401234: main (in /build/src/gnutls-3.0.14/tests/mini-loss-time) > ==24740== > I guess this shouldn't happen? Hello Andreas, Indeed it shouldn't but it seems to be happening. It think it is because there are two processes and the parent kills the child, thus creating a leak for valgrind. I didn't know how to fix that so I've left it as it is until I get a better idea :) So I think it is safe to ignore for now. regards, Nikos From nmav at gnutls.org Sat Feb 25 09:34:39 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 09:34:39 +0100 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <20120225025947.GA17318@mhcomputing.net> References: <20120225025947.GA17318@mhcomputing.net> Message-ID: <4F489D1F.4070706@gnutls.org> On 02/25/2012 03:59 AM, Matthew Hall wrote: > While investigating some other bugs in GnuTLS I located this bug in > the --debug=99999999 option in GnuTLS 3.0.14, which is not present in > 3.0.11, due to some changes in the way that GnuTLS seems to handle > its CLI options. > > It is possible the bug is caused by the AutoOpts library. > > It seems to be an issue with the format string or arg list used to > attempt to report that the value passed to the --debug is out of the > expected range up to 9999. The bug triggers on any value > 9999. Thank you for reporting that. It seems there is a string format issue. I've reported it to the autogen maintainer. regards, Nikos From INVALID.NOREPLY at gnu.org Sat Feb 25 09:40:22 2012 From: INVALID.NOREPLY at gnu.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 08:40:22 +0000 Subject: [sr #107967] Add missing file to distribution tarball In-Reply-To: <20120224-190137.sv87248.96117@savannah.gnu.org> References: <20120224-190137.sv87248.96117@savannah.gnu.org> Message-ID: <20120225-104022.sv707.36858@savannah.gnu.org> Follow-up Comment #1, sr #107967 (project gnutls): Hello, This should only be required if you modify the gnutls headers. If you didn't then the distributed documentation should be just ok. If you didn't modify the headers, could it have been something that confused make, such as wrong modification time to files? I will include this file, but I'd like to make sure first that it is not used unless the headers are modified. _______________________________________________________ Reply to this item at: _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ From nmav at gnutls.org Sat Feb 25 09:51:54 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 09:51:54 +0100 Subject: patch to documentation on how to add a custom supplemental data message In-Reply-To: <4F47C362.5090603@angry-red-pla.net> References: <4F47C362.5090603@angry-red-pla.net> Message-ID: <4F48A12A.5010207@gnutls.org> On 02/24/2012 06:05 PM, Carolin Latze wrote: > Hi all, > finally - after 3 years (... :( ) - I wrote this section about how > to add a custom supplemental data handshake message to GnuTLS. I > checked the webpage but did not see how add the patch directly, which > is why I attached it to this mail. Please let me know if this is not > the correct way to do this Thank you Carolin. I'd suggest to submit the patch using git-format-patch, so that your name is included in the commit. (A way to do it is to commit locally and then use git-format-patch to generate the patch). regards, Nikos From toralf.foerster at gmx.de Sat Feb 25 11:29:46 2012 From: toralf.foerster at gmx.de (Toralf =?utf-8?q?F=C3=B6rster?=) Date: Sat, 25 Feb 2012 11:29:46 +0100 Subject: gnu-tls-3.0.14 : rfc2253-escape-test failed Message-ID: <201202251129.47738.toralf.foerster@gmx.de> Under an almost stable Gentoo - gcc version 4.5.3 (Gentoo 4.5.3-r2 p1.1, pie-0.4.7) - I get : ... PASS: resume PASS: setcredcrash PASS: openpgpself ==13308== 156 (36 direct, 120 indirect) bytes in 1 blocks are definitely lost in loss record 273 of 293 ==13308== at 0x4026509: malloc (in /usr/lib/valgrind/vgpreload_memcheck- x86-linux.so) ==13308== by 0x414C989: nss_parse_service_list (nsswitch.c:544) ==13308== by 0x414CEF4: __nss_database_lookup (nsswitch.c:137) ==13308== by 0x463A17C: ??? ==13308== by 0x463BD74: ??? ==13308== by 0x4103EB4: getpwuid_r@@GLIBC_2.1.2 (getXXbyYY_r.c:256) ==13308== by 0x41037F6: getpwuid (getXXbyYY.c:117) ==13308== by 0x806107C: get_current_user_info (shell.c:1640) ==13308== by 0x807E53A: initialize_shell_variables (variables.c:650) ==13308== by 0x806183B: shell_initialize (shell.c:1708) ==13308== by 0x806297F: main (shell.c:558) ==13308== FAIL: rfc2253-escape-test =================================== 1 of 54 tests failed Please report to bug-gnutls at gnu.org =================================== -- MfG/Sincerely Toralf F?rster pgp finger print: 7B1A 07F4 EC82 0F90 D4C2 8936 872A E508 7DB6 9DA3 From nmav at gnutls.org Sat Feb 25 11:47:57 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 11:47:57 +0100 Subject: gnu-tls-3.0.14 : rfc2253-escape-test failed In-Reply-To: <201202251129.47738.toralf.foerster@gmx.de> References: <201202251129.47738.toralf.foerster@gmx.de> Message-ID: <4F48BC5D.3080102@gnutls.org> On 02/25/2012 11:29 AM, Toralf F?rster wrote: > Under an almost stable Gentoo - gcc version 4.5.3 (Gentoo 4.5.3-r2 p1.1, > pie-0.4.7) - I get : Hello Toralf, You can ignore this error. It is a memory leak when running a shell script in your system, which has nothing to do with gnutls. regards, Nikos From nmav at gnutls.org Sat Feb 25 13:06:27 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 13:06:27 +0100 Subject: tests/mini-loss fails on kfree-* In-Reply-To: <20120221171026.GA1982@downhill.g.la> References: <20120221171026.GA1982@downhill.g.la> Message-ID: <4F48CEC3.7040903@gnutls.org> On 02/21/2012 06:10 PM, Andreas Metzler wrote: > Hello, > > On kfree-* (tested on kfree-i386 and kfree-amd64) tests/mini-loss > does not complete: I've figured out the issue. It seems freebsd is more strict on the microseconds value provided to select. I've commited fixes for the library and gnutls-serv at: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=93354fe965b79203c412c85c312c2fcf096264a7 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=bd86118a9dec58bf720780291b93f12150841cea regards, Nikos From ametzler at downhill.at.eu.org Sat Feb 25 17:02:18 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sat, 25 Feb 2012 17:02:18 +0100 Subject: tests/mini-loss fails on kfree-* In-Reply-To: <4F48CEC3.7040903@gnutls.org> References: <20120221171026.GA1982@downhill.g.la> <4F48CEC3.7040903@gnutls.org> Message-ID: <20120225160218.GA2093@downhill.g.la> On 2012-02-25 Nikos Mavrogiannopoulos wrote: > On 02/21/2012 06:10 PM, Andreas Metzler wrote: >> On kfree-* (tested on kfree-i386 and kfree-amd64) tests/mini-loss >> does not complete: > I've figured out the issue. It seems freebsd is more strict on the > microseconds value provided to select. I've commited fixes for the > library and gnutls-serv at: > http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=93354fe965b79203c412c85c312c2fcf096264a7 > http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=bd86118a9dec58bf720780291b93f12150841cea Great, this worked on the Debian buildds. thanks, cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' From ametzler at downhill.at.eu.org Sat Feb 25 18:41:51 2012 From: ametzler at downhill.at.eu.org (Andreas Metzler) Date: Sat, 25 Feb 2012 18:41:51 +0100 Subject: dtls-stress test fails on kfreebsd-am64 Message-ID: <20120225174151.GA4016@downhill.g.la> Hello, dtls-stress exits with exitcode 3 on kfreebsd-am64: (sid)ametzler at asdfasdf:~/GNUTLS/gnutls28-3.0.14/tests/dtls$ ./dtls-stress -shello 021 -sfinished 01 -cfinished 012 SKeyExchange CKeyExchange CFinished 3030 server| timer_create: Invalid argument 3030 client| timer_create: Invalid argument 3030 TT SHello(021), SFinished(01), CFinished(012) :- SKeyExchange, CKeyExchange, CFinished cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' From s_buckhe at cs.uni-kl.de Sat Feb 25 19:08:36 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sat, 25 Feb 2012 19:08:36 +0100 Subject: dtls-stress test fails on kfreebsd-am64 In-Reply-To: <20120225174151.GA4016@downhill.g.la> References: <20120225174151.GA4016@downhill.g.la> Message-ID: <4F4923A4.6070103@cs.uni-kl.de> > dtls-stress exits with exitcode 3 on kfreebsd-am64: That would mean that your OS does not support the CLOCK_MONOTONIC clock, if the POSIX/FreeBSD manpages apply. Is that so? From bkorb at gnu.org Sat Feb 25 20:29:44 2012 From: bkorb at gnu.org (Bruce Korb) Date: Sat, 25 Feb 2012 11:29:44 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <20120225025947.GA17318@mhcomputing.net> References: <20120225025947.GA17318@mhcomputing.net> Message-ID: <4F4936A8.8090601@gnu.org> On 02/24/12 18:59, Matthew Hall wrote: > While investigating some other bugs in GnuTLS I located this bug in the > --debug=99999999 option in GnuTLS 3.0.14, which is not present in 3.0.11, due > to some changes in the way that GnuTLS seems to handle its CLI options. > > It is possible the bug is caused by the AutoOpts library. No, it is caused by the stanza describing the debug option: flag = { name = debug; value = d; arg-type = number; arg-range = "0 -> 9999"; descrip = "Enable debugging."; doc = "Specifies the debug level."; }; If you request help ("--help" or "-h") it will tell you this, as will the man page. From nmav at gnutls.org Sat Feb 25 20:42:03 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sat, 25 Feb 2012 20:42:03 +0100 Subject: dtls-stress test fails on kfreebsd-am64 In-Reply-To: <4F4923A4.6070103@cs.uni-kl.de> References: <20120225174151.GA4016@downhill.g.la> <4F4923A4.6070103@cs.uni-kl.de> Message-ID: <4F49398B.1010409@gnutls.org> On 02/25/2012 07:08 PM, Sean Buckheister wrote: >> dtls-stress exits with exitcode 3 on kfreebsd-am64: > > That would mean that your OS does not support the CLOCK_MONOTONIC clock, > if the POSIX/FreeBSD manpages apply. Is that so? I tried to reproduce on a native freebsd system, and in order to compile I make the following commits: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=fad26f7329b80b9c38bf782353f137246dd8fd07 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=e06474ab977af37d633d1aefdc6b0ab016198970 http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=cb2d61723ce1aadc1ee6d082f0bdcd59e27067da It seems one or all of them fixed the issue because I couldn't reproduce that. regards, Nikos From mhall at mhcomputing.net Sat Feb 25 22:23:17 2012 From: mhall at mhcomputing.net (Matthew Hall) Date: Sat, 25 Feb 2012 13:23:17 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <4F4936A8.8090601@gnu.org> References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> Message-ID: <20120225212317.GA20047@mhcomputing.net> On Sat, Feb 25, 2012 at 11:29:44AM -0800, Bruce Korb wrote: > On 02/24/12 18:59, Matthew Hall wrote: > >While investigating some other bugs in GnuTLS I located this bug in the > >--debug=99999999 option in GnuTLS 3.0.14, which is not present in 3.0.11, due > >to some changes in the way that GnuTLS seems to handle its CLI options. > > > >It is possible the bug is caused by the AutoOpts library. > > No, it is caused by the stanza describing the debug option: > > flag = { > name = debug; > value = d; > arg-type = number; > arg-range = "0 -> 9999"; > descrip = "Enable debugging."; > doc = "Specifies the debug level."; > }; > > If you request help ("--help" or "-h") it will tell you this, > as will the man page. I doubt that the intended behavior in response to an incorrect specification of the option (said incorrect invocation worked fine in 3.0.11) is a segfault, and Nikos already replied in agreement with this theory. I also said that the value I passed to trigger the issue was invalid in the subject of the thread so that it would be clear I was not trying to claim I provided good input when I did not do so. I hope it didn't look like I was saying the whole option did not work, but only the error handling for bad values. Regards, Matthew. From bkorb at gnu.org Sat Feb 25 22:42:46 2012 From: bkorb at gnu.org (Bruce Korb) Date: Sat, 25 Feb 2012 13:42:46 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <20120225212317.GA20047@mhcomputing.net> References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> Message-ID: <4F4955D6.2090906@gnu.org> On 02/25/12 13:23, Matthew Hall wrote: > I doubt that the intended behavior in response to an incorrect specification > of the option (said incorrect invocation worked fine in 3.0.11) is a segfault, You are right. I was asleep at the wheel. Please try: http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz Thank you. From s_buckhe at cs.uni-kl.de Sun Feb 26 00:03:46 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 26 Feb 2012 00:03:46 +0100 Subject: DTLS rehandshake broken Message-ID: <4F4968D2.2000305@cs.uni-kl.de> Hi, DTLS rehandshake does not work in 3.0.13, hasn't in 3.0.12 and 3.0.3, and probably in every version between those. Instead of performing rehandshake, the system simply locks. One possible test, two shells required. First shell: gnutls-serv --echo --udp --priority NORMAL:+ANON-ECDH Second shell: gnutls-cli --udp --priority NORMAL:+ANON-ECDH --port 5556 localhost --rehandshake -- Sean From nmav at gnutls.org Sun Feb 26 12:28:59 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 26 Feb 2012 12:28:59 +0100 Subject: DTLS rehandshake broken In-Reply-To: <4F4968D2.2000305@cs.uni-kl.de> References: <4F4968D2.2000305@cs.uni-kl.de> Message-ID: <4F4A177B.20900@gnutls.org> On 02/26/2012 12:03 AM, Sean Buckheister wrote: > Hi, > > DTLS rehandshake does not work in 3.0.13, hasn't in 3.0.12 and 3.0.3, > and probably in every version between those. Instead of performing > rehandshake, the system simply locks. > > One possible test, two shells required. > > First shell: gnutls-serv --echo --udp --priority NORMAL:+ANON-ECDH > > Second shell: gnutls-cli --udp --priority NORMAL:+ANON-ECDH --port 5556 > localhost --rehandshake Hello Sean, You are correct. It seems that the retransmission timers were not deleted on the initiation of a rehandshake causing the re-transmission of the queued handshake packets. The issue must be now solved in the repository and I've also added test applications for this use-case. regards, Nikos From s_buckhe at cs.uni-kl.de Sun Feb 26 17:35:30 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 26 Feb 2012 17:35:30 +0100 Subject: DTLS rehandshake broken In-Reply-To: <4F4A177B.20900@gnutls.org> References: <4F4968D2.2000305@cs.uni-kl.de> <4F4A177B.20900@gnutls.org> Message-ID: <4F4A5F52.109@cs.uni-kl.de> > Hello Sean, > You are correct. It seems that the retransmission timers were not > deleted on the initiation of a rehandshake causing the re-transmission > of the queued handshake packets. The issue must be now solved in the > repository and I've also added test applications for this use-case. Indeed, thank you. Running a modified dtls-stress with maximum debug settings still results in a few puzzling message, though: 0 client|<4> REC[0x60ca20]: Short record length 76 > 48 - 20 (under attack?) 0 server|<4> REC[0x60ca20]: Short record length 195 > 96 - 20 (under attack?) 0 client|<4> REC[0x60ca20]: Short record length 23 > 32 - 20 (under attack?) 0 server|<4> REC[0x60ca20]: Short record length 246 > 48 - 20 (under attack? Current git head does not build for me, but I'd guess something over here is wrong there: CC libcmd_certtool_la-certtool-args.lo certtool-args.c:55:13: error: conflicting types for 'optionAlias' ../src/libopts/autoopts/options.h:1031:12: note: previous declaration of 'optionAlias' was here make[3]: *** [libcmd_certtool_la-certtool-args.lo] Error 1 make[3]: Leaving directory `/dev/shm/gnutls/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/dev/shm/gnutls/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/dev/shm/gnutls' make: *** [all] Error 2 From nmav at gnutls.org Sun Feb 26 20:13:03 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Sun, 26 Feb 2012 20:13:03 +0100 Subject: DTLS rehandshake broken In-Reply-To: <4F4A5F52.109@cs.uni-kl.de> References: <4F4968D2.2000305@cs.uni-kl.de> <4F4A177B.20900@gnutls.org> <4F4A5F52.109@cs.uni-kl.de> Message-ID: <4F4A843F.6050402@gnutls.org> On 02/26/2012 05:35 PM, Sean Buckheister wrote: > Indeed, thank you. Running a modified dtls-stress with maximum debug > settings still results in a few puzzling message, though: > 0 client|<4> REC[0x60ca20]: Short record length 76 > 48 - 20 (under attack?) > 0 server|<4> REC[0x60ca20]: Short record length 195 > 96 - 20 (under > attack?) > 0 client|<4> REC[0x60ca20]: Short record length 23 > 32 - 20 (under attack?) > 0 server|<4> REC[0x60ca20]: Short record length 246 > 48 - 20 (under attack? This is an error in decryption. Is it because of the current changes? > Current git head does not build for me, but I'd guess something over > here is wrong there: > > CC libcmd_certtool_la-certtool-args.lo > certtool-args.c:55:13: error: conflicting types for 'optionAlias' > ../src/libopts/autoopts/options.h:1031:12: note: previous declaration of > 'optionAlias' was here Hello, Could you try building using this version of autogen? http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz You might need to do a "touch src/*.def" to regenerate the required files. regards, Nikos From s_buckhe at cs.uni-kl.de Sun Feb 26 20:29:45 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 26 Feb 2012 20:29:45 +0100 Subject: DTLS rehandshake broken In-Reply-To: <4F4A843F.6050402@gnutls.org> References: <4F4968D2.2000305@cs.uni-kl.de> <4F4A177B.20900@gnutls.org> <4F4A5F52.109@cs.uni-kl.de> <4F4A843F.6050402@gnutls.org> Message-ID: <4F4A8829.4080404@cs.uni-kl.de> > This is an error in decryption. Is it because of the current changes? Hard to say; this happens only after the first rehandshake. Rehandshake works regardless. Everything up to that point works fine. > Could you try building using this version of autogen? > http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz > You might need to do a "touch src/*.def" to regenerate the required files. I built autogen from that archive and put it first in my $PATH. It still does not build, but the error is different: autogen serv-args.def fserr 2: cannot map data file options: No such file or directory make[3]: [serv-args.c] Error 2 (ignored) CC libcmd_serv_la-serv-args.lo gcc: error: ./serv-args.c: No such file or directory gcc: fatal error: no input files compilation terminated. I'm inclined to think that my setup is a little broken. From bkorb at gnu.org Sun Feb 26 21:42:24 2012 From: bkorb at gnu.org (Bruce Korb) Date: Sun, 26 Feb 2012 12:42:24 -0800 Subject: DTLS rehandshake broken In-Reply-To: <4F4A8829.4080404@cs.uni-kl.de> References: <4F4968D2.2000305@cs.uni-kl.de> <4F4A177B.20900@gnutls.org> <4F4A5F52.109@cs.uni-kl.de> <4F4A843F.6050402@gnutls.org> <4F4A8829.4080404@cs.uni-kl.de> Message-ID: <4F4A9930.1090006@gnu.org> On 02/26/12 11:29, Sean Buckheister wrote: >> Could you try building using this version of autogen? >> http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz >> You might need to do a "touch src/*.def" to regenerate the required files. > > I built autogen from that archive and put it first in my $PATH. It still > does not build, but the error is different: > > autogen serv-args.def > fserr 2: cannot map data file options: No such file or directory This smells a little bit of srcdir != builddir and you're in the build directory looking for source. Could that be? > make[3]: [serv-args.c] Error 2 (ignored) > CC libcmd_serv_la-serv-args.lo > gcc: error: ./serv-args.c: No such file or directory This shouldn't be too surprising, after ignoring the autogen error. From s_buckhe at cs.uni-kl.de Sun Feb 26 21:47:30 2012 From: s_buckhe at cs.uni-kl.de (Sean Buckheister) Date: Sun, 26 Feb 2012 21:47:30 +0100 Subject: DTLS rehandshake broken In-Reply-To: <4F4A9930.1090006@gnu.org> References: <4F4968D2.2000305@cs.uni-kl.de> <4F4A177B.20900@gnutls.org> <4F4A5F52.109@cs.uni-kl.de> <4F4A843F.6050402@gnutls.org> <4F4A8829.4080404@cs.uni-kl.de> <4F4A9930.1090006@gnu.org> Message-ID: <4F4A9A62.1050505@cs.uni-kl.de> >> autogen serv-args.def >> fserr 2: cannot map data file options: No such file or directory > > This smells a little bit of srcdir != builddir and you're in the > build directory looking for source. Could that be? I built from the gnutls srcdir, with PATH set as reported, and which reporting autogen to lie where i built the snapshot. Earlier revisions of gnutls build fine in that mode. From guido at trentalancia.com Sun Feb 26 23:53:35 2012 From: guido at trentalancia.com (Guido Trentalancia) Date: Sun, 26 Feb 2012 23:53:35 +0100 Subject: gnutls-3.0.14: failed testsuite Message-ID: <1330296815.2054.7.camel@vortex> make check-TESTS make[6]: Entering directory `/usr/src/gnutls-3.0.14/gl/tests' PASS: test-accept PASS: test-alloca-opt PASS: test-argp PASS: test-argp-2.sh PASS: test-arpa_inet PASS: test-base64 PASS: test-binary-io.sh PASS: test-bind PASS: test-byteswap PASS: test-c-ctype PASS: test-close PASS: test-connect PASS: test-dirent PASS: test-dup2 PASS: test-environ PASS: test-errno PASS: test-fcntl-h PASS: test-fdopen PASS: test-fgetc PASS: test-float PASS: test-fputc PASS: test-fread PASS: test-frexp-nolibm PASS: test-frexpl-nolibm PASS: test-fseek.sh PASS: test-fseek2.sh PASS: test-fseeko.sh PASS: test-fseeko2.sh PASS: test-fseeko3.sh PASS: test-fseeko4.sh PASS: test-fseterr PASS: test-fstat PASS: test-ftell.sh PASS: test-ftell2.sh PASS: test-ftell3 PASS: test-ftello.sh PASS: test-ftello2.sh PASS: test-ftello3 PASS: test-ftello4.sh PASS: test-ftruncate.sh PASS: test-func PASS: test-fwrite PASS: test-getaddrinfo PASS: test-getcwd-lgpl PASS: test-getdelim PASS: test-getline PASS: test-getopt PASS: test-getpeername PASS: test-gettimeofday PASS: test-ignore-value PASS: test-inet_ntop PASS: test-inet_pton PASS: test-intprops PASS: test-inttypes PASS: test-ioctl PASS: test-isnand-nolibm PASS: test-isnanf-nolibm PASS: test-isnanl-nolibm PASS: test-listen PASS: test-lstat PASS: test-malloc-gnu PASS: test-malloca PASS: test-math PASS: test-memchr PASS: test-netdb PASS: test-netinet_in PASS: test-open PASS: test-pathmax PASS: test-perror.sh PASS: test-perror2 PASS: test-pipe PASS: test-printf-frexp PASS: test-printf-frexpl PASS: test-rawmemchr PASS: test-read-file PASS: test-recv PASS: test-recvfrom Invalid fd test... passed Unconnected socket test... passed Connected sockets test... passed General socket test with fork... passed Pipe test... passed PASS: test-select PASS: test-select-in.sh PASS: test-select-out.sh PASS: test-send PASS: test-sendto PASS: test-setenv PASS: test-setsockopt PASS: test-shutdown PASS: test-signal-h PASS: test-signbit PASS: test-sleep PASS: test-snprintf PASS: test-sockets PASS: test-stat PASS: test-stdalign PASS: test-stdbool PASS: test-stddef PASS: test-stdint PASS: test-stdio PASS: test-stdlib PASS: test-strchrnul PASS: test-strerror PASS: test-strerror_r PASS: test-string PASS: test-strings PASS: test-strnlen PASS: test-strverscmp PASS: test-symlink PASS: test-sys_ioctl PASS: test-sys_select PASS: test-sys_socket PASS: test-sys_stat PASS: test-sys_time PASS: test-sys_types PASS: test-sys_uio PASS: test-sysexits PASS: test-init.sh PASS: test-time PASS: test-u64 PASS: test-unistd PASS: test-unsetenv PASS: test-vasnprintf PASS: test-vasprintf PASS: test-vc-list-files-git.sh PASS: test-vc-list-files-cvs.sh PASS: test-verify PASS: test-verify.sh PASS: test-version-etc.sh PASS: test-vfprintf-posix.sh PASS: test-vprintf-posix.sh PASS: test-vsnprintf PASS: test-wchar ==================== All 129 tests passed ==================== make[6]: Leaving directory `/usr/src/gnutls-3.0.14/gl/tests' make[5]: Leaving directory `/usr/src/gnutls-3.0.14/gl/tests' make[4]: Leaving directory `/usr/src/gnutls-3.0.14/gl/tests' make[3]: Leaving directory `/usr/src/gnutls-3.0.14/gl/tests' make[3]: Entering directory `/usr/src/gnutls-3.0.14/gl' make[3]: Nothing to be done for `check-am'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/gl' make[2]: Leaving directory `/usr/src/gnutls-3.0.14/gl' make[1]: Leaving directory `/usr/src/gnutls-3.0.14/gl' Making check in lib make[1]: Entering directory `/usr/src/gnutls-3.0.14/lib' Making check in includes make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/includes' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/includes' Making check in x509 make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/x509' CC common.lo CC key_encode.lo CC key_decode.lo CC crl.lo CC crl_write.lo CC crq.lo CC dn.lo CC extensions.lo CC mpi.lo CC output.lo CC pbkdf2-sha1.lo CC pkcs12.lo CC pkcs12_bag.lo CC pkcs12_encr.lo CC pkcs7.lo CC privkey.lo CC privkey_pkcs8.lo CC rfc2818_hostname.lo CC sign.lo CC verify.lo CC x509.lo CC x509_write.lo CC verify-high.lo CC ocsp.lo CC ocsp_output.lo CCLD libgnutls_x509.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/x509' Making check in accelerated make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/accelerated' Making check in x86 make[3]: Entering directory `/usr/src/gnutls-3.0.14/lib/accelerated/x86' CC sha-padlock.lo CC hmac-padlock.lo CC aes-x86.lo CC aes-padlock.lo CC aes-gcm-padlock.lo CC aes-gcm-x86.lo CCLD libx86.la make[3]: Leaving directory `/usr/src/gnutls-3.0.14/lib/accelerated/x86' make[3]: Entering directory `/usr/src/gnutls-3.0.14/lib/accelerated' CC cryptodev.lo CC cryptodev-gcm.lo CCLD libaccelerated.la make[3]: Leaving directory `/usr/src/gnutls-3.0.14/lib/accelerated' make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/accelerated' Making check in auth make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/auth' CC anon.lo CC cert.lo CC dh_common.lo CC dhe.lo CC dhe_psk.lo CC psk.lo CC psk_passwd.lo CC rsa.lo CC rsa_export.lo CC srp.lo CC srp_passwd.lo CC srp_rsa.lo CC srp_sb64.lo CC anon_ecdh.lo CC ecdh_common.lo CCLD libgnutls_auth.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/auth' Making check in ext make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/ext' CC max_record.lo CC cert_type.lo CC server_name.lo CC signature.lo CC safe_renegotiation.lo CC session_ticket.lo CC srp.lo CC ecc.lo CCLD libgnutls_ext.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/ext' Making check in algorithms make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/algorithms' CC cert_types.lo CC ciphers.lo CC ciphersuites.lo CC ecc.lo CC kx.lo CC mac.lo CC protocols.lo CC publickey.lo CC secparams.lo CC sign.lo CCLD libgnutls_alg.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/algorithms' Making check in extras make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/extras' CC randomart.lo CCLD libgnutls_extras.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/extras' Making check in opencdk make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/opencdk' CC armor.lo CC kbnode.lo CC sig-check.lo CC hash.lo CC keydb.lo CC pubkey.lo CC stream.lo CC write-packet.lo CC misc.lo CC seskey.lo CC literal.lo CC new-packet.lo CC read-packet.lo CCLD libminiopencdk.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/opencdk' Making check in openpgp make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/openpgp' CC pgp.lo CC pgpverify.lo CC extras.lo CC compat.lo CC privkey.lo CC output.lo CC gnutls_openpgp.lo CCLD libgnutls_openpgp.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/openpgp' Making check in nettle make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib/nettle' CC pk.lo CC mpi.lo CC mac.lo CC cipher.lo CC rnd.lo CC init.lo CC egd.lo CC ecc_projective_check_point.lo CCLD libcrypto.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib/nettle' make[2]: Entering directory `/usr/src/gnutls-3.0.14/lib' CC gnutls_record.lo CC gnutls_compress.lo CC debug.lo CC gnutls_cipher.lo CC gnutls_mbuffers.lo CC gnutls_buffers.lo CC gnutls_handshake.lo CC gnutls_num.lo CC gnutls_errors.lo CC gnutls_dh.lo CC gnutls_kx.lo CC gnutls_priority.lo CC gnutls_hash_int.lo CC gnutls_cipher_int.lo CC gnutls_session.lo CC gnutls_db.lo CC x509_b64.lo CC gnutls_extensions.lo CC gnutls_auth.lo CC gnutls_v2_compat.lo CC gnutls_datum.lo CC gnutls_session_pack.lo CC gnutls_mpi.lo CC gnutls_pk.lo CC gnutls_cert.lo CC gnutls_global.lo CC gnutls_constate.lo CC gnutls_anon_cred.lo CC pkix_asn1_tab.lo CC gnutls_asn1_tab.lo CC gnutls_mem.lo CC gnutls_ui.lo CC gnutls_sig.lo CC gnutls_ecc.lo CC gnutls_dh_primes.lo CC gnutls_alert.lo CC system.lo CC gnutls_str.lo CC gnutls_state.lo CC gnutls_x509.lo CC gnutls_rsa_export.lo CC gnutls_supplemental.lo CC random.lo CC crypto-api.lo CC gnutls_privkey.lo CC gnutls_pcert.lo CC gnutls_pubkey.lo CC locks.lo CC gnutls_dtls.lo CC system_override.lo CC crypto-backend.lo CC verify-tofu.lo CC pkcs11.lo CC pkcs11_privkey.lo CC pkcs11_write.lo CC pkcs11_secret.lo CC gnutls_srp.lo CC gnutls_psk.lo CCLD libgnutls.la copying selected object files to avoid basename conflicts... CXXLD libgnutlsxx.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/lib' make[1]: Leaving directory `/usr/src/gnutls-3.0.14/lib' Making check in extra make[1]: Entering directory `/usr/src/gnutls-3.0.14/extra' Making check in includes make[2]: Entering directory `/usr/src/gnutls-3.0.14/extra/includes' make[2]: Nothing to be done for `check'. make[2]: Leaving directory `/usr/src/gnutls-3.0.14/extra/includes' make[2]: Entering directory `/usr/src/gnutls-3.0.14/extra' CC openssl_compat.lo CCLD libgnutls-openssl.la make[2]: Leaving directory `/usr/src/gnutls-3.0.14/extra' make[1]: Leaving directory `/usr/src/gnutls-3.0.14/extra' Making check in po make[1]: Entering directory `/usr/src/gnutls-3.0.14/po' make[1]: Leaving directory `/usr/src/gnutls-3.0.14/po' Making check in src make[1]: Entering directory `/usr/src/gnutls-3.0.14/src' Making check in crywrap make[2]: Entering directory `/usr/src/gnutls-3.0.14/src/crywrap' CCLD crywrap make[2]: Leaving directory `/usr/src/gnutls-3.0.14/src/crywrap' make[2]: Entering directory `/usr/src/gnutls-3.0.14/src' CCLD libcmd-certtool.la copying selected object files to avoid basename conflicts... CCLD libcmd-p11tool.la copying selected object files to avoid basename conflicts... CCLD gnutls-serv CCLD gnutls-cli CCLD psktool CCLD gnutls-cli-debug CCLD certtool CCLD srptool CCLD ocsptool CCLD p11tool make[2]: Leaving directory `/usr/src/gnutls-3.0.14/src' make[1]: Leaving directory `/usr/src/gnutls-3.0.14/src' Making check in doc make[1]: Entering directory `/usr/src/gnutls-3.0.14/doc' make check-recursive make[2]: Entering directory `/usr/src/gnutls-3.0.14/doc' Making check in examples make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc/examples' CCLD ex-client-resume CCLD ex-client-dtls CCLD ex-cert-select CCLD ex-client-x509 CXXLD ex-cxx CCLD ex-client-anon CCLD ex-serv-anon CCLD ex-serv-pgp CCLD ex-cert-select-pkcs11 CCLD ex-client-psk CCLD ex-serv-psk CCLD ex-client-srp CCLD ex-serv-srp CCLD ex-ocsp-client make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc/examples' Making check in cyclo make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc/cyclo' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc/cyclo' Making check in scripts make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc/scripts' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc/scripts' Making check in manpages make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc/manpages' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc/manpages' Making check in credentials make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc/credentials' Making check in openpgp make[4]: Entering directory `/usr/src/gnutls-3.0.14/doc/credentials/openpgp' make[4]: Nothing to be done for `check'. make[4]: Leaving directory `/usr/src/gnutls-3.0.14/doc/credentials/openpgp' Making check in srp make[4]: Entering directory `/usr/src/gnutls-3.0.14/doc/credentials/srp' make[4]: Nothing to be done for `check'. make[4]: Leaving directory `/usr/src/gnutls-3.0.14/doc/credentials/srp' Making check in x509 make[4]: Entering directory `/usr/src/gnutls-3.0.14/doc/credentials/x509' make[4]: Nothing to be done for `check'. make[4]: Leaving directory `/usr/src/gnutls-3.0.14/doc/credentials/x509' make[4]: Entering directory `/usr/src/gnutls-3.0.14/doc/credentials' make[4]: Nothing to be done for `check-am'. make[4]: Leaving directory `/usr/src/gnutls-3.0.14/doc/credentials' make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc/credentials' Making check in latex make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc/latex' make[3]: Nothing to be done for `check'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc/latex' make[3]: Entering directory `/usr/src/gnutls-3.0.14/doc' make[3]: Nothing to be done for `check-am'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/doc' make[2]: Leaving directory `/usr/src/gnutls-3.0.14/doc' make[1]: Leaving directory `/usr/src/gnutls-3.0.14/doc' Making check in tests make[1]: Entering directory `/usr/src/gnutls-3.0.14/tests' Making check in . make[2]: Entering directory `/usr/src/gnutls-3.0.14/tests' make mini-deflate simple gc set_pkcs12_cred certder certuniqueid mpi certificate_set_x509_crl dn parse_ca moredn mini hostname-check cve-2008-4989 pkcs12_s2k chainverify crq_key_id x509sign-verify cve-2009-1415 cve-2009-1416 crq_apis init_roundtrip pkcs12_s2k_pem dn2 mini-eagain nul-in-x509-names x509_altname pkcs12_encode mini-x509 mini-x509-rehandshake rng-fork mini-eagain-dtls mini-loss x509cert x509cert-tl infoaccess rsa-encrypt-decrypt mini-loss-time mini-tdb ocsp openssl openpgp-auth openpgp-auth2 openpgp-keyring pgps2kgnu x509self x509dn anonself pskself dhepskself resume setcredcrash openpgpself \ rfc2253-escape-test make[3]: Entering directory `/usr/src/gnutls-3.0.14/tests' CCLD mini-deflate CCLD simple CCLD gc CCLD set_pkcs12_cred CCLD certder CCLD certuniqueid CC mpi.o CCLD mpi CCLD certificate_set_x509_crl CCLD dn CCLD parse_ca CCLD moredn CCLD mini CCLD hostname-check CCLD cve-2008-4989 CC pkcs12_s2k.o CCLD pkcs12_s2k CCLD chainverify CCLD crq_key_id CCLD x509sign-verify CCLD cve-2009-1415 CCLD cve-2009-1416 CCLD crq_apis CCLD init_roundtrip CCLD pkcs12_s2k_pem CCLD dn2 CCLD mini-eagain CCLD nul-in-x509-names CCLD x509_altname CCLD pkcs12_encode CCLD mini-x509 CCLD mini-x509-rehandshake CCLD rng-fork CCLD mini-eagain-dtls CCLD mini-loss CCLD x509cert CCLD x509cert-tl CCLD infoaccess CCLD rsa-encrypt-decrypt CCLD mini-loss-time CCLD mini-tdb CCLD ocsp CCLD openssl CCLD openpgp-auth CCLD openpgp-auth2 CCLD openpgp-keyring CCLD pgps2kgnu CCLD x509self CCLD x509dn CCLD anonself CCLD pskself CCLD dhepskself CCLD resume CCLD setcredcrash CCLD openpgpself make[3]: Nothing to be done for `rfc2253-escape-test'. make[3]: Leaving directory `/usr/src/gnutls-3.0.14/tests' make check-TESTS make[3]: Entering directory `/usr/src/gnutls-3.0.14/tests' ==11469== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11469== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11469== by 0x6BDFDB2: ??? ==11469== by 0x6BE66D7: ??? ==11469== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11469== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11469== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11469== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11469== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11469== by 0x401848: doit (in /usr/src/gnutls-3.0.14/tests/mini-deflate) ==11469== by 0x4014B4: main (in /usr/src/gnutls-3.0.14/tests/mini-deflate) ==11469== FAIL: mini-deflate PASS: simple ==11478== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11478== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11478== by 0x6BDFDB2: ??? ==11478== by 0x6BE66D7: ??? ==11478== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11478== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11478== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11478== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11478== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11478== by 0x400D28: doit (in /usr/src/gnutls-3.0.14/tests/gc) ==11478== by 0x400B74: main (in /usr/src/gnutls-3.0.14/tests/gc) ==11478== FAIL: gc ==11484== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11484== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11484== by 0x6BDFDB2: ??? ==11484== by 0x6BE66D7: ??? ==11484== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11484== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11484== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11484== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11484== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11484== by 0x400CA9: doit (in /usr/src/gnutls-3.0.14/tests/set_pkcs12_cred) ==11484== by 0x400B14: main (in /usr/src/gnutls-3.0.14/tests/set_pkcs12_cred) ==11484== FAIL: set_pkcs12_cred ==11490== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11490== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11490== by 0x6BDFDB2: ??? ==11490== by 0x6BE66D7: ??? ==11490== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11490== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11490== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11490== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11490== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11490== by 0x400C64: doit (in /usr/src/gnutls-3.0.14/tests/certder) ==11490== by 0x400A44: main (in /usr/src/gnutls-3.0.14/tests/certder) ==11490== FAIL: certder ==11496== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11496== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11496== by 0x6BDFDB2: ??? ==11496== by 0x6BE66D7: ??? ==11496== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11496== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11496== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11496== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11496== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11496== by 0x400DA6: doit (in /usr/src/gnutls-3.0.14/tests/certuniqueid) ==11496== by 0x400B64: main (in /usr/src/gnutls-3.0.14/tests/certuniqueid) ==11496== FAIL: certuniqueid ==11502== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11502== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11502== by 0x6BDFDB2: ??? ==11502== by 0x6BE66D7: ??? ==11502== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11502== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11502== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11502== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11502== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11502== by 0x400D78: doit (in /usr/src/gnutls-3.0.14/tests/mpi) ==11502== by 0x400BC4: main (in /usr/src/gnutls-3.0.14/tests/mpi) ==11502== FAIL: mpi ==11508== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11508== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11508== by 0x6BDFDB2: ??? ==11508== by 0x6BE66D7: ??? ==11508== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11508== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11508== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11508== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11508== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11508== by 0x400973: main (in /usr/src/gnutls-3.0.14/tests/certificate_set_x509_crl) ==11508== FAIL: certificate_set_x509_crl ==11514== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11514== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11514== by 0x6BDFDB2: ??? ==11514== by 0x6BE66D7: ??? ==11514== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11514== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11514== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11514== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11514== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11514== by 0x400DE8: doit (in /usr/src/gnutls-3.0.14/tests/dn) ==11514== by 0x400BA4: main (in /usr/src/gnutls-3.0.14/tests/dn) ==11514== FAIL: dn ==11520== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11520== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11520== by 0x6BDFDB2: ??? ==11520== by 0x6BE66D7: ??? ==11520== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11520== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11520== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11520== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11520== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11520== by 0x400C18: doit (in /usr/src/gnutls-3.0.14/tests/parse_ca) ==11520== by 0x400A74: main (in /usr/src/gnutls-3.0.14/tests/parse_ca) ==11520== FAIL: parse_ca ==11526== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11526== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11526== by 0x6BDFDB2: ??? ==11526== by 0x6BE66D7: ??? ==11526== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11526== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11526== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11526== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11526== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11526== by 0x400E4B: doit (in /usr/src/gnutls-3.0.14/tests/moredn) ==11526== by 0x400CB4: main (in /usr/src/gnutls-3.0.14/tests/moredn) ==11526== FAIL: moredn ==11532== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11532== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11532== by 0x6BDFDB2: ??? ==11532== by 0x6BE66D7: ??? ==11532== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11532== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11532== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11532== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11532== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11532== by 0x401848: doit (in /usr/src/gnutls-3.0.14/tests/mini) ==11532== by 0x4014B4: main (in /usr/src/gnutls-3.0.14/tests/mini) ==11532== FAIL: mini ==11538== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11538== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11538== by 0x6BDFDB2: ??? ==11538== by 0x6BE66D7: ??? ==11538== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11538== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11538== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11538== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11538== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11538== by 0x400DB8: doit (in /usr/src/gnutls-3.0.14/tests/hostname-check) ==11538== by 0x400C24: main (in /usr/src/gnutls-3.0.14/tests/hostname-check) ==11538== FAIL: hostname-check ==11544== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11544== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11544== by 0x6BDFDB2: ??? ==11544== by 0x6BE66D7: ??? ==11544== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11544== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11544== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11544== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11544== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11544== by 0x400829: main (in /usr/src/gnutls-3.0.14/tests/cve-2008-4989) ==11544== FAIL: cve-2008-4989 ==11550== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11550== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11550== by 0x6BDFDB2: ??? ==11550== by 0x6BE66D7: ??? ==11550== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11550== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11550== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11550== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11550== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11550== by 0x400D2C: doit (in /usr/src/gnutls-3.0.14/tests/pkcs12_s2k) ==11550== by 0x400B74: main (in /usr/src/gnutls-3.0.14/tests/pkcs12_s2k) ==11550== FAIL: pkcs12_s2k ==11556== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11556== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11556== by 0x6BDFDB2: ??? ==11556== by 0x6BE66D7: ??? ==11556== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11556== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11556== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11556== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11556== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11556== by 0x400FF2: doit (in /usr/src/gnutls-3.0.14/tests/chainverify) ==11556== by 0x400E14: main (in /usr/src/gnutls-3.0.14/tests/chainverify) ==11556== FAIL: chainverify ==11562== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11562== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11562== by 0x6BDFDB2: ??? ==11562== by 0x6BE66D7: ??? ==11562== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11562== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11562== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11562== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11562== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11562== by 0x40137A: doit (in /usr/src/gnutls-3.0.14/tests/crq_key_id) ==11562== by 0x4011C4: main (in /usr/src/gnutls-3.0.14/tests/crq_key_id) ==11562== FAIL: crq_key_id ==11568== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11568== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11568== by 0x6BDFDB2: ??? ==11568== by 0x6BE66D7: ??? ==11568== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11568== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11568== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11568== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11568== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11568== by 0x401158: doit (in /usr/src/gnutls-3.0.14/tests/x509sign-verify) ==11568== by 0x400FC4: main (in /usr/src/gnutls-3.0.14/tests/x509sign-verify) ==11568== FAIL: x509sign-verify ==11574== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11574== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11574== by 0x6BDFDB2: ??? ==11574== by 0x6BE66D7: ??? ==11574== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11574== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11574== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11574== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11574== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11574== by 0x40088F: main (in /usr/src/gnutls-3.0.14/tests/cve-2009-1415) ==11574== FAIL: cve-2009-1415 ==11580== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11580== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11580== by 0x6BDFDB2: ??? ==11580== by 0x6BE66D7: ??? ==11580== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11580== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11580== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11580== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11580== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11580== by 0x40082E: main (in /usr/src/gnutls-3.0.14/tests/cve-2009-1416) ==11580== FAIL: cve-2009-1416 ==11586== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11586== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11586== by 0x6BDFDB2: ??? ==11586== by 0x6BE66D7: ??? ==11586== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11586== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11586== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11586== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11586== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11586== by 0x401551: doit (in /usr/src/gnutls-3.0.14/tests/crq_apis) ==11586== by 0x401394: main (in /usr/src/gnutls-3.0.14/tests/crq_apis) ==11586== FAIL: crq_apis ==11592== 40 bytes in 1 blocks are definitely lost in loss record 3 of 13 ==11592== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11592== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x400AB8: doit (in /usr/src/gnutls-3.0.14/tests/init_roundtrip) ==11592== by 0x400924: main (in /usr/src/gnutls-3.0.14/tests/init_roundtrip) ==11592== ==11592== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 11 of 13 ==11592== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11592== by 0x6BDFDB2: ??? ==11592== by 0x6BE66D7: ??? ==11592== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11592== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11592== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11592== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x400AB8: doit (in /usr/src/gnutls-3.0.14/tests/init_roundtrip) ==11592== by 0x400924: main (in /usr/src/gnutls-3.0.14/tests/init_roundtrip) ==11592== ==11592== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 12 of 13 ==11592== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11592== by 0x6BDFDB2: ??? ==11592== by 0x6BE66D7: ??? ==11592== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11592== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11592== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11592== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11592== by 0x400AC6: doit (in /usr/src/gnutls-3.0.14/tests/init_roundtrip) ==11592== by 0x400924: main (in /usr/src/gnutls-3.0.14/tests/init_roundtrip) ==11592== FAIL: init_roundtrip ==11599== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11599== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11599== by 0x6BDFDB2: ??? ==11599== by 0x6BE66D7: ??? ==11599== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11599== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11599== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11599== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11599== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11599== by 0x40075F: main (in /usr/src/gnutls-3.0.14/tests/pkcs12_s2k_pem) ==11599== FAIL: pkcs12_s2k_pem ==11605== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11605== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11605== by 0x6BDFDB2: ??? ==11605== by 0x6BE66D7: ??? ==11605== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11605== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11605== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11605== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11605== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11605== by 0x400C88: doit (in /usr/src/gnutls-3.0.14/tests/dn2) ==11605== by 0x400AE4: main (in /usr/src/gnutls-3.0.14/tests/dn2) ==11605== FAIL: dn2 ==11611== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11611== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11611== by 0x6BDFDB2: ??? ==11611== by 0x6BE66D7: ??? ==11611== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11611== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11611== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11611== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11611== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11611== by 0x4018A8: doit (in /usr/src/gnutls-3.0.14/tests/mini-eagain) ==11611== by 0x4014B4: main (in /usr/src/gnutls-3.0.14/tests/mini-eagain) ==11611== FAIL: mini-eagain ==11617== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11617== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11617== by 0x6BDFDB2: ??? ==11617== by 0x6BE66D7: ??? ==11617== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11617== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11617== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11617== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11617== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11617== by 0x400C38: doit (in /usr/src/gnutls-3.0.14/tests/nul-in-x509-names) ==11617== by 0x400AA4: main (in /usr/src/gnutls-3.0.14/tests/nul-in-x509-names) ==11617== FAIL: nul-in-x509-names ==11623== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11623== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11623== by 0x6BDFDB2: ??? ==11623== by 0x6BE66D7: ??? ==11623== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11623== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11623== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11623== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11623== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11623== by 0x400C8F: doit (in /usr/src/gnutls-3.0.14/tests/x509_altname) ==11623== by 0x400AC4: main (in /usr/src/gnutls-3.0.14/tests/x509_altname) ==11623== FAIL: x509_altname ==11629== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11629== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11629== by 0x6BDFDB2: ??? ==11629== by 0x6BE66D7: ??? ==11629== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11629== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11629== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11629== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11629== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11629== by 0x4012BD: doit (in /usr/src/gnutls-3.0.14/tests/pkcs12_encode) ==11629== by 0x401104: main (in /usr/src/gnutls-3.0.14/tests/pkcs12_encode) ==11629== FAIL: pkcs12_encode ==11635== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11635== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11635== by 0x6BDFDB2: ??? ==11635== by 0x6BE66D7: ??? ==11635== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11635== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11635== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11635== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11635== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11635== by 0x40144A: doit (in /usr/src/gnutls-3.0.14/tests/mini-x509) ==11635== by 0x4010D4: main (in /usr/src/gnutls-3.0.14/tests/mini-x509) ==11635== FAIL: mini-x509 ==11641== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11641== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11641== by 0x6BDFDB2: ??? ==11641== by 0x6BE66D7: ??? ==11641== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11641== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11641== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11641== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11641== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11641== by 0x40154A: doit (in /usr/src/gnutls-3.0.14/tests/mini-x509-rehandshake) ==11641== by 0x4011D4: main (in /usr/src/gnutls-3.0.14/tests/mini-x509-rehandshake) ==11641== FAIL: mini-x509-rehandshake ==11649== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11649== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11649== by 0x6BE689E: ??? ==11649== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11649== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11649== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11649== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11649== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11649== by 0x400D8C: doit (in /usr/src/gnutls-3.0.14/tests/rng-fork) ==11649== by 0x400BF4: main (in /usr/src/gnutls-3.0.14/tests/rng-fork) ==11649== ==11649== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11649== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11649== by 0x6BDFDB2: ??? ==11649== by 0x6BE66D7: ??? ==11649== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11649== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11649== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11649== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11649== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11649== by 0x400D8C: doit (in /usr/src/gnutls-3.0.14/tests/rng-fork) ==11649== by 0x400BF4: main (in /usr/src/gnutls-3.0.14/tests/rng-fork) ==11649== ==11647== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11647== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11647== by 0x6BDFDB2: ??? ==11647== by 0x6BE66D7: ??? ==11647== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11647== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11647== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11647== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11647== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11647== by 0x400D8C: doit (in /usr/src/gnutls-3.0.14/tests/rng-fork) ==11647== by 0x400BF4: main (in /usr/src/gnutls-3.0.14/tests/rng-fork) ==11647== FAIL: rng-fork ==11654== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11654== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11654== by 0x6BDFDB2: ??? ==11654== by 0x6BE66D7: ??? ==11654== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11654== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11654== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11654== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11654== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11654== by 0x401958: doit (in /usr/src/gnutls-3.0.14/tests/mini-eagain-dtls) ==11654== by 0x401544: main (in /usr/src/gnutls-3.0.14/tests/mini-eagain-dtls) ==11654== FAIL: mini-eagain-dtls ==11661== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11661== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11661== by 0x6BDFDB2: ??? ==11661== by 0x6BE66D7: ??? ==11661== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11661== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11661== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11661== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11661== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11661== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11661== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11661== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11661== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11661== Child died with status 1 ==11664== 40 bytes in 1 blocks are definitely lost in loss record 3 of 13 ==11664== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11664== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== ==11664== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 11 of 13 ==11664== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11664== by 0x6BDFDB2: ??? ==11664== by 0x6BE66D7: ??? ==11664== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11664== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11664== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11664== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== ==11664== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 12 of 13 ==11664== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11664== by 0x6BDFDB2: ??? ==11664== by 0x6BE66D7: ??? ==11664== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11664== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11664== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11664== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11664== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11664== Child died with status 1 ==11667== 40 bytes in 1 blocks are definitely lost in loss record 3 of 16 ==11667== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11667== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== ==11667== 40 bytes in 1 blocks are definitely lost in loss record 4 of 16 ==11667== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11667== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== ==11667== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 13 of 16 ==11667== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11667== by 0x6BDFDB2: ??? ==11667== by 0x6BE66D7: ??? ==11667== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11667== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11667== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11667== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== ==11667== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 14 of 16 ==11667== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11667== by 0x6BDFDB2: ??? ==11667== by 0x6BE66D7: ??? ==11667== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11667== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11667== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11667== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== ==11667== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 15 of 16 ==11667== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11667== by 0x6BDFDB2: ??? ==11667== by 0x6BE66D7: ??? ==11667== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11667== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11667== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11667== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11667== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11667== Child died with status 1 ==11670== 40 bytes in 1 blocks are definitely lost in loss record 3 of 19 ==11670== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11670== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== ==11670== 40 bytes in 1 blocks are definitely lost in loss record 4 of 19 ==11670== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11670== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== ==11670== 40 bytes in 1 blocks are definitely lost in loss record 5 of 19 ==11670== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11670== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== ==11670== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 15 of 19 ==11670== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11670== by 0x6BDFDB2: ??? ==11670== by 0x6BE66D7: ??? ==11670== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11670== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11670== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11670== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== ==11670== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 16 of 19 ==11670== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11670== by 0x6BDFDB2: ??? ==11670== by 0x6BE66D7: ??? ==11670== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11670== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11670== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11670== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== ==11670== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 17 of 19 ==11670== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11670== by 0x6BDFDB2: ??? ==11670== by 0x6BE66D7: ??? ==11670== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11670== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11670== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11670== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== ==11670== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 18 of 19 ==11670== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11670== by 0x6BDFDB2: ??? ==11670== by 0x6BE66D7: ??? ==11670== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11670== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11670== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11670== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11670== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11670== Child died with status 1 ==11673== 40 bytes in 1 blocks are definitely lost in loss record 3 of 22 ==11673== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11673== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 40 bytes in 1 blocks are definitely lost in loss record 4 of 22 ==11673== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11673== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 40 bytes in 1 blocks are definitely lost in loss record 5 of 22 ==11673== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11673== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 40 bytes in 1 blocks are definitely lost in loss record 6 of 22 ==11673== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11673== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 17 of 22 ==11673== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11673== by 0x6BDFDB2: ??? ==11673== by 0x6BE66D7: ??? ==11673== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11673== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11673== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11673== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 18 of 22 ==11673== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11673== by 0x6BDFDB2: ??? ==11673== by 0x6BE66D7: ??? ==11673== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11673== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11673== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11673== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 19 of 22 ==11673== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11673== by 0x6BDFDB2: ??? ==11673== by 0x6BE66D7: ??? ==11673== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11673== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11673== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11673== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 20 of 22 ==11673== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11673== by 0x6BDFDB2: ??? ==11673== by 0x6BE66D7: ??? ==11673== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11673== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11673== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11673== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== ==11673== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 22 ==11673== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11673== by 0x6BDFDB2: ??? ==11673== by 0x6BE66D7: ??? ==11673== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11673== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11673== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11673== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11673== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11673== Child died with status 1 ==11676== 40 bytes in 1 blocks are definitely lost in loss record 3 of 25 ==11676== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11676== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 40 bytes in 1 blocks are definitely lost in loss record 4 of 25 ==11676== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11676== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 40 bytes in 1 blocks are definitely lost in loss record 5 of 25 ==11676== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11676== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 40 bytes in 1 blocks are definitely lost in loss record 6 of 25 ==11676== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11676== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 40 bytes in 1 blocks are definitely lost in loss record 7 of 25 ==11676== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11676== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 18 of 25 ==11676== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11676== by 0x6BDFDB2: ??? ==11676== by 0x6BE66D7: ??? ==11676== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11676== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11676== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11676== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 19 of 25 ==11676== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11676== by 0x6BDFDB2: ??? ==11676== by 0x6BE66D7: ??? ==11676== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11676== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11676== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11676== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 20 of 25 ==11676== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11676== by 0x6BDFDB2: ??? ==11676== by 0x6BE66D7: ??? ==11676== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11676== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11676== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11676== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 25 ==11676== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11676== by 0x6BDFDB2: ??? ==11676== by 0x6BE66D7: ??? ==11676== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11676== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11676== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11676== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 22 of 25 ==11676== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11676== by 0x6BDFDB2: ??? ==11676== by 0x6BE66D7: ??? ==11676== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11676== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11676== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11676== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== ==11676== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 23 of 25 ==11676== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11676== by 0x6BDFDB2: ??? ==11676== by 0x6BE66D7: ??? ==11676== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11676== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11676== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11676== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11676== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11676== Child died with status 1 ==11679== 40 bytes in 1 blocks are definitely lost in loss record 3 of 28 ==11679== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11679== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 40 bytes in 1 blocks are definitely lost in loss record 4 of 28 ==11679== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11679== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 40 bytes in 1 blocks are definitely lost in loss record 5 of 28 ==11679== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11679== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 40 bytes in 1 blocks are definitely lost in loss record 6 of 28 ==11679== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11679== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 40 bytes in 1 blocks are definitely lost in loss record 7 of 28 ==11679== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11679== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 40 bytes in 1 blocks are definitely lost in loss record 8 of 28 ==11679== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11679== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 18 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 19 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 20 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 22 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 23 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== ==11679== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 24 of 28 ==11679== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11679== by 0x6BDFDB2: ??? ==11679== by 0x6BE66D7: ??? ==11679== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11679== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11679== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11679== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11679== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11679== Child died with status 1 ==11682== 40 bytes in 1 blocks are definitely lost in loss record 3 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 40 bytes in 1 blocks are definitely lost in loss record 4 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 40 bytes in 1 blocks are definitely lost in loss record 5 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 40 bytes in 1 blocks are definitely lost in loss record 6 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 40 bytes in 1 blocks are definitely lost in loss record 7 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 40 bytes in 1 blocks are definitely lost in loss record 8 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 40 bytes in 1 blocks are definitely lost in loss record 9 of 31 ==11682== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11682== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 20 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 22 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 23 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 24 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 25 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 26 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== ==11682== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 27 of 31 ==11682== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11682== by 0x6BDFDB2: ??? ==11682== by 0x6BE66D7: ??? ==11682== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11682== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11682== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11682== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11682== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401F2B: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11682== Child died with status 1 ==11685== 40 bytes in 1 blocks are definitely lost in loss record 3 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 4 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 5 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 6 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 7 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 8 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 9 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 40 bytes in 1 blocks are definitely lost in loss record 10 of 34 ==11685== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11685== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401F2B: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 22 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 23 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 24 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 25 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 26 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 27 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 28 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 29 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401F2B: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== ==11685== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 30 of 34 ==11685== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11685== by 0x6BDFDB2: ??? ==11685== by 0x6BE66D7: ??? ==11685== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11685== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11685== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11685== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11685== by 0x401463: client (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401C7D: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11685== Child died with status 1 Self test `./mini-loss' finished with 9 errors ==11660== 40 bytes in 1 blocks are definitely lost in loss record 3 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 4 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 5 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 6 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 7 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 8 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 9 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 40 bytes in 1 blocks are definitely lost in loss record 10 of 32 ==11660== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11660== by 0x4E81417: pkcs11_add_module.part.4 (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E81A16: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401F2B: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 20 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EC2: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401ED1: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 22 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EE0: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 23 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EEF: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 24 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401EFE: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 25 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401F0D: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 26 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401F1C: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 27 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401F2B: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== ==11660== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 28 of 32 ==11660== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11660== by 0x6BDFDB2: ??? ==11660== by 0x6BE66D7: ??? ==11660== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11660== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11660== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11660== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11660== by 0x401944: server (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401C42: start (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== by 0x401734: main (in /usr/src/gnutls-3.0.14/tests/mini-loss) ==11660== FAIL: mini-loss ==11692== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11692== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11692== by 0x6BDFDB2: ??? ==11692== by 0x6BE66D7: ??? ==11692== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11692== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11692== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11692== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11692== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11692== by 0x400F5D: doit (in /usr/src/gnutls-3.0.14/tests/x509cert) ==11692== by 0x400DA4: main (in /usr/src/gnutls-3.0.14/tests/x509cert) ==11692== FAIL: x509cert ==11698== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11698== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11698== by 0x6BDFDB2: ??? ==11698== by 0x6BE66D7: ??? ==11698== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11698== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11698== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11698== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11698== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11698== by 0x401048: doit (in /usr/src/gnutls-3.0.14/tests/x509cert-tl) ==11698== by 0x400E74: main (in /usr/src/gnutls-3.0.14/tests/x509cert-tl) ==11698== FAIL: x509cert-tl ==11704== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11704== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11704== by 0x6BDFDB2: ??? ==11704== by 0x6BE66D7: ??? ==11704== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11704== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11704== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11704== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11704== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11704== by 0x400CE9: doit (in /usr/src/gnutls-3.0.14/tests/infoaccess) ==11704== by 0x400B54: main (in /usr/src/gnutls-3.0.14/tests/infoaccess) ==11704== FAIL: infoaccess ==11710== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11710== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11710== by 0x6BDFDB2: ??? ==11710== by 0x6BE66D7: ??? ==11710== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11710== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11710== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11710== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11710== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11710== by 0x4010A8: doit (in /usr/src/gnutls-3.0.14/tests/rsa-encrypt-decrypt) ==11710== by 0x400F14: main (in /usr/src/gnutls-3.0.14/tests/rsa-encrypt-decrypt) ==11710== FAIL: rsa-encrypt-decrypt ==11717== 16,464 bytes in 1 blocks are definitely lost in loss record 43 of 44 ==11717== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11717== by 0x4E541DA: _mbuffer_alloc (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E551A9: _gnutls_io_read_buffered (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E50784: _gnutls_recv_in_buffers (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E56903: _gnutls_handshake_io_recv_int (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E59747: _gnutls_recv_handshake (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E5DA7E: _gnutls_recv_server_kx_message (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E5B789: _gnutls_handshake_client (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4E5BC57: gnutls_handshake (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11717== by 0x4018A6: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss-time) ==11717== by 0x401224: main (in /usr/src/gnutls-3.0.14/tests/mini-loss-time) ==11717== ==11716== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11716== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11716== by 0x6BDFDB2: ??? ==11716== by 0x6BE66D7: ??? ==11716== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11716== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11716== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11716== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11716== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11716== by 0x4016AC: doit (in /usr/src/gnutls-3.0.14/tests/mini-loss-time) ==11716== by 0x401224: main (in /usr/src/gnutls-3.0.14/tests/mini-loss-time) ==11716== FAIL: mini-loss-time ==11733== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11733== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11733== by 0x6BDFDB2: ??? ==11733== by 0x6BE66D7: ??? ==11733== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11733== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11733== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11733== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11733== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11733== by 0x400E9A: doit (in /usr/src/gnutls-3.0.14/tests/mini-tdb) ==11733== by 0x400CD4: main (in /usr/src/gnutls-3.0.14/tests/mini-tdb) ==11733== FAIL: mini-tdb ==11739== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11739== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11739== by 0x6BDFDB2: ??? ==11739== by 0x6BE66D7: ??? ==11739== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11739== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11739== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11739== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11739== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11739== by 0x4018AD: doit (in /usr/src/gnutls-3.0.14/tests/ocsp) ==11739== by 0x4016F4: main (in /usr/src/gnutls-3.0.14/tests/ocsp) ==11739== FAIL: ocsp ==11745== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11745== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11745== by 0x6DF5DB2: ??? ==11745== by 0x6DFC6D7: ??? ==11745== by 0x65E0FB2: initialize_module_unlocked_reentrant (modules.c:512) ==11745== by 0x65E12C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11745== by 0x65E1B5B: p11_kit_initialize_registered (modules.c:725) ==11745== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11745== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11745== by 0x400C98: doit (in /usr/src/gnutls-3.0.14/tests/openssl) ==11745== by 0x400B04: main (in /usr/src/gnutls-3.0.14/tests/openssl) ==11745== FAIL: openssl ==11756== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11756== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11756== by 0x6BE689E: ??? ==11756== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11756== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11756== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11756== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11756== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11756== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11756== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11756== ==11756== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11756== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11756== by 0x6BDFDB2: ??? ==11756== by 0x6BE66D7: ??? ==11756== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11756== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11756== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11756== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11756== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11756== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11756== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11756== child exited with status 1 Self test `./openpgp-auth' finished with 1 errors ==11755== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11755== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11755== by 0x6BE689E: ??? ==11755== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11755== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11755== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11755== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11755== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11755== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11755== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11755== ==11755== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11755== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11755== by 0x6BDFDB2: ??? ==11755== by 0x6BE66D7: ??? ==11755== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11755== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11755== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11755== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11755== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11755== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11755== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11755== child exited with status 1 Self test `./openpgp-auth' finished with 1 errors ==11757== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11757== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11757== by 0x6BE689E: ??? ==11757== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11757== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11757== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11757== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11757== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11757== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11757== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11757== ==11757== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11757== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11757== by 0x6BDFDB2: ??? ==11757== by 0x6BE66D7: ??? ==11757== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11757== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11757== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11757== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11757== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11757== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11757== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11757== child exited with status 1 Self test `./openpgp-auth' finished with 2 errors ==11754== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11754== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11754== by 0x6BE689E: ??? ==11754== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11754== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11754== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11754== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11754== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11754== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11754== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11754== ==11754== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11754== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11754== by 0x6BDFDB2: ??? ==11754== by 0x6BE66D7: ??? ==11754== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11754== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11754== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11754== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11754== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11754== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11754== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11754== child exited with status 1 Self test `./openpgp-auth' finished with 1 errors ==11759== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11759== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11759== by 0x6BE689E: ??? ==11759== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11759== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11759== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11759== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11759== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11759== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11759== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11759== ==11759== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11759== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11759== by 0x6BDFDB2: ??? ==11759== by 0x6BE66D7: ??? ==11759== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11759== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11759== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11759== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11759== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11759== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11759== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11759== child exited with status 1 Self test `./openpgp-auth' finished with 2 errors ==11758== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11758== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11758== by 0x6BE689E: ??? ==11758== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11758== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11758== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11758== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11758== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11758== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11758== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11758== ==11758== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11758== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11758== by 0x6BDFDB2: ??? ==11758== by 0x6BE66D7: ??? ==11758== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11758== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11758== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11758== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11758== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11758== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11758== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11758== child exited with status 1 Self test `./openpgp-auth' finished with 2 errors ==11760== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11760== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11760== by 0x6BE689E: ??? ==11760== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11760== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11760== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11760== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11760== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11760== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11760== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11760== ==11760== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11760== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11760== by 0x6BDFDB2: ??? ==11760== by 0x6BE66D7: ??? ==11760== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11760== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11760== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11760== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11760== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11760== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11760== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11760== child exited with status 1 Self test `./openpgp-auth' finished with 3 errors ==11753== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11753== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11753== by 0x6BE689E: ??? ==11753== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11753== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11753== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11753== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11753== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11753== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11753== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11753== ==11753== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11753== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11753== by 0x6BDFDB2: ??? ==11753== by 0x6BE66D7: ??? ==11753== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11753== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11753== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11753== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11753== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11753== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11753== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11753== child exited with status 1 Self test `./openpgp-auth' finished with 1 errors ==11764== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11764== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11764== by 0x6BE689E: ??? ==11764== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11764== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11764== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11764== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11764== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11764== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11764== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11764== ==11764== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11764== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11764== by 0x6BDFDB2: ??? ==11764== by 0x6BE66D7: ??? ==11764== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11764== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11764== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11764== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11764== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11764== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11764== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11764== child exited with status 1 Self test `./openpgp-auth' finished with 2 errors ==11762== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11762== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11762== by 0x6BE689E: ??? ==11762== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11762== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11762== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11762== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11762== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11762== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11762== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11762== ==11762== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11762== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11762== by 0x6BDFDB2: ??? ==11762== by 0x6BE66D7: ??? ==11762== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11762== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11762== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11762== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11762== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11762== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11762== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11762== child exited with status 1 Self test `./openpgp-auth' finished with 2 errors ==11765== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11765== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11765== by 0x6BE689E: ??? ==11765== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11765== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11765== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11765== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11765== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11765== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11765== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11765== ==11765== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11765== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11765== by 0x6BDFDB2: ??? ==11765== by 0x6BE66D7: ??? ==11765== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11765== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11765== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11765== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11765== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11765== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11765== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11765== child exited with status 1 Self test `./openpgp-auth' finished with 3 errors ==11761== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11761== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11761== by 0x6BE689E: ??? ==11761== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11761== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11761== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11761== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11761== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11761== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11761== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11761== ==11761== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11761== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11761== by 0x6BDFDB2: ??? ==11761== by 0x6BE66D7: ??? ==11761== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11761== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11761== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11761== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11761== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11761== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11761== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11761== child exited with status 1 Self test `./openpgp-auth' finished with 2 errors ==11767== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11767== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11767== by 0x6BE689E: ??? ==11767== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11767== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11767== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11767== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11767== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11767== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11767== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11767== ==11767== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11767== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11767== by 0x6BDFDB2: ??? ==11767== by 0x6BE66D7: ??? ==11767== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11767== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11767== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11767== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11767== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11767== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11767== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11767== child exited with status 1 Self test `./openpgp-auth' finished with 3 errors ==11766== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11766== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11766== by 0x6BE689E: ??? ==11766== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11766== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11766== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11766== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11766== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11766== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11766== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11766== ==11766== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11766== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11766== by 0x6BDFDB2: ??? ==11766== by 0x6BE66D7: ??? ==11766== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11766== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11766== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11766== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11766== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11766== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11766== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11766== child exited with status 1 Self test `./openpgp-auth' finished with 3 errors ==11768== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11768== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11768== by 0x6BE689E: ??? ==11768== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11768== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11768== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11768== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11768== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11768== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11768== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11768== ==11768== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11768== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11768== by 0x6BDFDB2: ??? ==11768== by 0x6BE66D7: ??? ==11768== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11768== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11768== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11768== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11768== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11768== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11768== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11768== child exited with status 1 Self test `./openpgp-auth' finished with 4 errors ==11751== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11751== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11751== by 0x6BDFDB2: ??? ==11751== by 0x6BE66D7: ??? ==11751== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11751== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11751== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11751== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11751== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11751== by 0x4016DB: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11751== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth) ==11751== FAIL: openpgp-auth ==11775== 27 bytes in 1 blocks are definitely lost in loss record 1 of 9 ==11775== at 0x4C295CD: malloc (vg_replace_malloc.c:263) ==11775== by 0x6BE689E: ??? ==11775== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11775== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11775== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11775== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11775== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11775== by 0x4016D7: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth2) ==11775== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth2) ==11775== ==11775== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 8 of 9 ==11775== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11775== by 0x6BDFDB2: ??? ==11775== by 0x6BE66D7: ??? ==11775== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11775== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11775== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11775== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11775== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11775== by 0x4016D7: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth2) ==11775== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth2) ==11775== child exited with status 1 Self test `./openpgp-auth2' finished with 1 errors ==11773== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11773== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11773== by 0x6BDFDB2: ??? ==11773== by 0x6BE66D7: ??? ==11773== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11773== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11773== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11773== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11773== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11773== by 0x4016D7: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-auth2) ==11773== by 0x4014F4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-auth2) ==11773== FAIL: openpgp-auth2 ==11781== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11781== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11781== by 0x6BDFDB2: ??? ==11781== by 0x6BE66D7: ??? ==11781== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11781== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11781== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11781== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11781== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11781== by 0x400D98: doit (in /usr/src/gnutls-3.0.14/tests/openpgp-keyring) ==11781== by 0x400BE4: main (in /usr/src/gnutls-3.0.14/tests/openpgp-keyring) ==11781== FAIL: openpgp-keyring ==11787== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11787== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11787== by 0x6BDFDB2: ??? ==11787== by 0x6BE66D7: ??? ==11787== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11787== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11787== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11787== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11787== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11787== by 0x40093C: main (in /usr/src/gnutls-3.0.14/tests/pgps2kgnu) ==11787== FAIL: pgps2kgnu ==11795== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11795== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11795== by 0x6BDFDB2: ??? ==11795== by 0x6BE66D7: ??? ==11795== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11795== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11795== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11795== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11795== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11795== by 0x402D6F: client (in /usr/src/gnutls-3.0.14/tests/x509self) ==11795== by 0x403257: doit (in /usr/src/gnutls-3.0.14/tests/x509self) ==11795== by 0x402644: main (in /usr/src/gnutls-3.0.14/tests/x509self) ==11795== ==11794== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11794== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11794== by 0x6BDFDB2: ??? ==11794== by 0x6BE66D7: ??? ==11794== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11794== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11794== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11794== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11794== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11794== by 0x4032A4: doit (in /usr/src/gnutls-3.0.14/tests/x509self) ==11794== by 0x402644: main (in /usr/src/gnutls-3.0.14/tests/x509self) ==11794== FAIL: x509self ==11803== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11803== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11803== by 0x6BDFDB2: ??? ==11803== by 0x6BE66D7: ??? ==11803== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11803== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11803== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11803== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11803== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11803== by 0x40309F: client (in /usr/src/gnutls-3.0.14/tests/x509dn) ==11803== by 0x40368C: doit (in /usr/src/gnutls-3.0.14/tests/x509dn) ==11803== by 0x4027C4: main (in /usr/src/gnutls-3.0.14/tests/x509dn) ==11803== server: client failed with exit status 1 Self test `./x509dn' finished with 1 errors ==11802== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11802== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11802== by 0x6BDFDB2: ??? ==11802== by 0x6BE66D7: ??? ==11802== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11802== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11802== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11802== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11802== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11802== by 0x40343B: doit (in /usr/src/gnutls-3.0.14/tests/x509dn) ==11802== by 0x4027C4: main (in /usr/src/gnutls-3.0.14/tests/x509dn) ==11802== FAIL: x509dn ==11811== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11811== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11811== by 0x6BDFDB2: ??? ==11811== by 0x6BE66D7: ??? ==11811== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11811== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11811== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11811== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11811== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11811== by 0x401A6F: client (in /usr/src/gnutls-3.0.14/tests/anonself) ==11811== by 0x401DD4: doit (in /usr/src/gnutls-3.0.14/tests/anonself) ==11811== by 0x401814: main (in /usr/src/gnutls-3.0.14/tests/anonself) ==11811== ==11810== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11810== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11810== by 0x6BDFDB2: ??? ==11810== by 0x6BE66D7: ??? ==11810== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11810== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11810== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11810== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11810== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11810== by 0x401E24: doit (in /usr/src/gnutls-3.0.14/tests/anonself) ==11810== by 0x401814: main (in /usr/src/gnutls-3.0.14/tests/anonself) ==11810== FAIL: anonself ==11819== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11819== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11819== by 0x6BDFDB2: ??? ==11819== by 0x6BE66D7: ??? ==11819== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11819== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11819== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11819== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11819== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11819== by 0x401906: client (in /usr/src/gnutls-3.0.14/tests/pskself) ==11819== by 0x401C74: doit (in /usr/src/gnutls-3.0.14/tests/pskself) ==11819== by 0x401644: main (in /usr/src/gnutls-3.0.14/tests/pskself) ==11819== ==11818== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11818== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11818== by 0x6BDFDB2: ??? ==11818== by 0x6BE66D7: ??? ==11818== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11818== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11818== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11818== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11818== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11818== by 0x401CDC: doit (in /usr/src/gnutls-3.0.14/tests/pskself) ==11818== by 0x401644: main (in /usr/src/gnutls-3.0.14/tests/pskself) ==11818== FAIL: pskself ==11827== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11827== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11827== by 0x6BDFDB2: ??? ==11827== by 0x6BE66D7: ??? ==11827== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11827== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11827== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11827== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11827== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11827== by 0x401AD6: client (in /usr/src/gnutls-3.0.14/tests/dhepskself) ==11827== by 0x401E34: doit (in /usr/src/gnutls-3.0.14/tests/dhepskself) ==11827== by 0x401814: main (in /usr/src/gnutls-3.0.14/tests/dhepskself) ==11827== ==11826== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11826== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11826== by 0x6BDFDB2: ??? ==11826== by 0x6BE66D7: ??? ==11826== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11826== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11826== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11826== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11826== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11826== by 0x401E9C: doit (in /usr/src/gnutls-3.0.14/tests/dhepskself) ==11826== by 0x401814: main (in /usr/src/gnutls-3.0.14/tests/dhepskself) ==11826== FAIL: dhepskself try to resume from db ==11835== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11835== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11835== by 0x6BDFDB2: ??? ==11835== by 0x6BE66D7: ??? ==11835== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11835== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11835== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11835== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11835== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11835== by 0x402519: client.isra.1 (in /usr/src/gnutls-3.0.14/tests/resume) ==11835== by 0x402EC3: doit (in /usr/src/gnutls-3.0.14/tests/resume) ==11835== by 0x401DD4: main (in /usr/src/gnutls-3.0.14/tests/resume) ==11835== try to resume from db try to resume from session ticket Self test `./resume' finished with 1 errors ==11834== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11834== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11834== by 0x6BDFDB2: ??? ==11834== by 0x6BE66D7: ??? ==11834== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11834== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11834== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11834== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11834== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11834== by 0x4029A5: doit (in /usr/src/gnutls-3.0.14/tests/resume) ==11834== by 0x401DD4: main (in /usr/src/gnutls-3.0.14/tests/resume) ==11834== FAIL: resume ==11842== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11842== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11842== by 0x6BDFDB2: ??? ==11842== by 0x6BE66D7: ??? ==11842== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11842== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11842== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11842== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11842== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11842== by 0x4007C8: main (in /usr/src/gnutls-3.0.14/tests/setcredcrash) ==11842== FAIL: setcredcrash ==11849== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11849== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11849== by 0x6BDFDB2: ??? ==11849== by 0x6BE66D7: ??? ==11849== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11849== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11849== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11849== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11849== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11849== by 0x402D11: client (in /usr/src/gnutls-3.0.14/tests/openpgpself) ==11849== by 0x40312D: doit (in /usr/src/gnutls-3.0.14/tests/openpgpself) ==11849== by 0x4025E4: main (in /usr/src/gnutls-3.0.14/tests/openpgpself) ==11849== ==11848== 376 (40 direct, 336 indirect) bytes in 1 blocks are definitely lost in loss record 7 of 8 ==11848== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) ==11848== by 0x6BDFDB2: ??? ==11848== by 0x6BE66D7: ??? ==11848== by 0x63CAFB2: initialize_module_unlocked_reentrant (modules.c:512) ==11848== by 0x63CB2C2: _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) ==11848== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) ==11848== by 0x4E81984: gnutls_pkcs11_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11848== by 0x4E6A202: gnutls_global_init (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) ==11848== by 0x403184: doit (in /usr/src/gnutls-3.0.14/tests/openpgpself) ==11848== by 0x4025E4: main (in /usr/src/gnutls-3.0.14/tests/openpgpself) ==11848== FAIL: openpgpself PASS: rfc2253-escape-test =================================== 52 of 54 tests failed Please report to bug-gnutls at gnu.org =================================== make[3]: *** [check-TESTS] Error 1 make[3]: Leaving directory `/usr/src/gnutls-3.0.14/tests' make[2]: *** [check-am] Error 2 make[2]: Leaving directory `/usr/src/gnutls-3.0.14/tests' make[1]: *** [check-recursive] Error 1 make[1]: Leaving directory `/usr/src/gnutls-3.0.14/tests' make: *** [check-recursive] Error 1 From nmav at gnutls.org Mon Feb 27 13:56:29 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Mon, 27 Feb 2012 13:56:29 +0100 Subject: gnutls-3.0.14: failed testsuite In-Reply-To: <1330296815.2054.7.camel@vortex> References: <1330296815.2054.7.camel@vortex> Message-ID: On Sun, Feb 26, 2012 at 11:53 PM, Guido Trentalancia wrote: > ==11469== ? ?at 0x4C27CB3: calloc (vg_replace_malloc.c:566) > ==11469== ? ?by 0x6BDFDB2: ??? > ==11469== ? ?by 0x6BE66D7: ??? > ==11469== ? ?by 0x63CAFB2: initialize_module_unlocked_reentrant > (modules.c:512) > ==11469== ? ?by 0x63CB2C2: > _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) > ==11469== ? ?by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) > ==11469== ? ?by 0x4E81984: gnutls_pkcs11_init > (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) Hello, It seems that in your system a pkcs11 module is causing a memory leak which prevents the test from succeeding. A work-around would be to run the test by temporarily disabling all pkcs11 modules loaded by p11-kit by removing /etc/pkcs11/modules. In the next release I'll remove the memory leak check completely to avoid such issues. regards, Nikos From guido at trentalancia.com Mon Feb 27 15:56:26 2012 From: guido at trentalancia.com (Guido Trentalancia) Date: Mon, 27 Feb 2012 15:56:26 +0100 Subject: gnutls-3.0.14: failed testsuite In-Reply-To: References: <1330296815.2054.7.camel@vortex> Message-ID: <1330354586.2074.4.camel@vortex> On Mon, 2012-02-27 at 13:56 +0100, Nikos Mavrogiannopoulos wrote: > On Sun, Feb 26, 2012 at 11:53 PM, Guido Trentalancia > wrote: > > ==11469== at 0x4C27CB3: calloc (vg_replace_malloc.c:566) > > ==11469== by 0x6BDFDB2: ??? > > ==11469== by 0x6BE66D7: ??? > > ==11469== by 0x63CAFB2: initialize_module_unlocked_reentrant > > (modules.c:512) > > ==11469== by 0x63CB2C2: > > _p11_kit_initialize_registered_unlocked_reentrant (modules.c:680) > > ==11469== by 0x63CBB5B: p11_kit_initialize_registered (modules.c:725) > > ==11469== by 0x4E81984: gnutls_pkcs11_init > > (in /usr/src/gnutls-3.0.14/lib/.libs/libgnutls.so.28.6.1) > > Hello, > It seems that in your system a pkcs11 module is causing a memory leak > which prevents the test from succeeding. A work-around would be to > run the test by temporarily disabling all pkcs11 modules loaded by p11-kit > by removing /etc/pkcs11/modules. In the next release I'll remove the > memory leak check completely to avoid such issues. For your information, I confirm the tests run fine when the /etc/pkcs11/modules is temporarily moved out of place. The module which is causing problems is gnome-keyring, so I'll drop a note on its bugzilla. > regards, > Nikos Regards, Guido From simon at josefsson.org Wed Feb 29 09:34:42 2012 From: simon at josefsson.org (Simon Josefsson) Date: Wed, 29 Feb 2012 09:34:42 +0100 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <4F4955D6.2090906@gnu.org> (Bruce Korb's message of "Sat, 25 Feb 2012 13:42:46 -0800") References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> Message-ID: <87linmxckd.fsf@latte.josefsson.org> Bruce Korb writes: > On 02/25/12 13:23, Matthew Hall wrote: >> I doubt that the intended behavior in response to an incorrect specification >> of the option (said incorrect invocation worked fine in 3.0.11) is a segfault, > > You are right. I was asleep at the wheel. Please try: > > http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz > > Thank you. I have updated the libopts in GnuTLS with the code from the tarball in the autogen 5.15 release. It didn't look like there were a lot of changes though... Matthew, can you check if the problem is resolved in git master? /Simon From simon at josefsson.org Wed Feb 29 09:38:51 2012 From: simon at josefsson.org (Simon Josefsson) Date: Wed, 29 Feb 2012 09:38:51 +0100 Subject: valgrind In-Reply-To: (Nikos Mavrogiannopoulos's message of "Mon, 27 Feb 2012 13:56:29 +0100") References: <1330296815.2054.7.camel@vortex> Message-ID: <87hayaxcdg.fsf_-_@latte.josefsson.org> Nikos Mavrogiannopoulos writes: > Hello, > It seems that in your system a pkcs11 module is causing a memory leak > which prevents the test from succeeding. A work-around would be to > run the test by temporarily disabling all pkcs11 modules loaded by p11-kit > by removing /etc/pkcs11/modules. In the next release I'll remove the > memory leak check completely to avoid such issues. It seems clear that running valgrind on all self checks is causing a lot of problems, but there are some checks we know should never have memory leaks and running valgrind on them would be good. One solution is to put these checks in a separate directory, and to only enable valgrind in that directory. Another solution is to use a wrapper script instead of invoking valgrind directly, and the wrapper script can have a whitelist of executables to run under valgrind, and the rest will run without valgrind. Can anyone think of other solutions? The problem is that the TESTS_ENVIRIONMENT variable affects all automake checks in a particular directory. I'd really like to see valgrind checking of at least some self-tests by default. (FWIW, I am experiencing this problem in several other projects as well, so a clean solution would be good..) /Simon From mhall at mhcomputing.net Wed Feb 29 09:50:54 2012 From: mhall at mhcomputing.net (Matthew Hall) Date: Wed, 29 Feb 2012 00:50:54 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <87linmxckd.fsf@latte.josefsson.org> References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> <87linmxckd.fsf@latte.josefsson.org> Message-ID: <20120229085054.GA29344@mhcomputing.net> On Wed, Feb 29, 2012 at 09:34:42AM +0100, Simon Josefsson wrote: > Bruce Korb writes: > > > On 02/25/12 13:23, Matthew Hall wrote: > >> I doubt that the intended behavior in response to an incorrect specification > >> of the option (said incorrect invocation worked fine in 3.0.11) is a segfault, > > > > You are right. I was asleep at the wheel. Please try: > > > > http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz > > > > Thank you. > > I have updated the libopts in GnuTLS with the code from the tarball in > the autogen 5.15 release. It didn't look like there were a lot of > changes though... Matthew, can you check if the problem is resolved in > git master? > > /Simon I would be happy to do so if you can provide the right git URL so I can be sure to check the right place. Matthew. From simon at josefsson.org Wed Feb 29 09:54:29 2012 From: simon at josefsson.org (Simon Josefsson) Date: Wed, 29 Feb 2012 09:54:29 +0100 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <20120229085054.GA29344@mhcomputing.net> (Matthew Hall's message of "Wed, 29 Feb 2012 00:50:54 -0800") References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> <87linmxckd.fsf@latte.josefsson.org> <20120229085054.GA29344@mhcomputing.net> Message-ID: <877gz6xbne.fsf@latte.josefsson.org> Matthew Hall writes: > On Wed, Feb 29, 2012 at 09:34:42AM +0100, Simon Josefsson wrote: >> Bruce Korb writes: >> >> > On 02/25/12 13:23, Matthew Hall wrote: >> >> I doubt that the intended behavior in response to an incorrect >> >> specification >> >> of the option (said incorrect invocation worked fine in 3.0.11) >> >> is a segfault, >> > >> > You are right. I was asleep at the wheel. Please try: >> > >> > http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz >> > >> > Thank you. >> >> I have updated the libopts in GnuTLS with the code from the tarball in >> the autogen 5.15 release. It didn't look like there were a lot of >> changes though... Matthew, can you check if the problem is resolved in >> git master? >> >> /Simon > > I would be happy to do so if you can provide the right git URL so I can be > sure to check the right place. The checkout links are here: https://www.gnu.org/software/gnutls/devel.html Thanks for testing. The entire update patch I made is here: http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=patch;h=83034b41ea2209a7ffb9a876b355c673ae58e57a I don't immediately see anything that solve this problem though. Bruce, was the fix for this problem included in the 5.15 release? /Simon From nmav at gnutls.org Wed Feb 29 10:05:16 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Wed, 29 Feb 2012 10:05:16 +0100 Subject: valgrind In-Reply-To: <87hayaxcdg.fsf_-_@latte.josefsson.org> References: <1330296815.2054.7.camel@vortex> <87hayaxcdg.fsf_-_@latte.josefsson.org> Message-ID: On Wed, Feb 29, 2012 at 9:38 AM, Simon Josefsson wrote: >> Hello, >> ?It seems that in your system a pkcs11 module is causing a memory leak >> which prevents the test from succeeding. A work-around would be to >> run the test by temporarily disabling all pkcs11 modules loaded by p11-kit >> by removing /etc/pkcs11/modules. In the next release I'll remove the >> memory leak check completely to avoid such issues. > It seems clear that running valgrind on all self checks is causing a lot > of problems, but there are some checks we know should never have memory > leaks and running valgrind on them would be good. > One solution is to put these checks in a separate directory, and to only > enable valgrind in that directory. We currently use that (see directory slow), but still we have occasional unexpected failures in the rest. The current solution is to run valgrind in the development environment and do not run it on the system to be installed. > Another solution is to use a wrapper script instead of invoking valgrind > directly, and the wrapper script can have a whitelist of executables to > run under valgrind, and the rest will run without valgrind. The problem is that we have occasional failures that are system dependent and cannot be predicted, thus such a solution wouldn't add much. I think the enabling of valgrind in the development environment is the cleanest solution. regards, Nikos From mhall at mhcomputing.net Wed Feb 29 10:06:50 2012 From: mhall at mhcomputing.net (Matthew Hall) Date: Wed, 29 Feb 2012 01:06:50 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <877gz6xbne.fsf@latte.josefsson.org> References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> <87linmxckd.fsf@latte.josefsson.org> <20120229085054.GA29344@mhcomputing.net> <877gz6xbne.fsf@latte.josefsson.org> Message-ID: <20120229090650.GA29399@mhcomputing.net> On Wed, Feb 29, 2012 at 09:54:29AM +0100, Simon Josefsson wrote: > > I would be happy to do so if you can provide the right git URL so I can be > > sure to check the right place. > > The checkout links are here: > > https://www.gnu.org/software/gnutls/devel.html > > Thanks for testing. > > The entire update patch I made is here: > > http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=patch;h=83034b41ea2209a7ffb9a876b355c673ae58e57a > > I don't immediately see anything that solve this problem though. Bruce, > was the fix for this problem included in the 5.15 release? > > /Simon This is quick and easy to retest. I can just check it tomorrow and report if it seems OK or not. Regards, Matthew. From nmav at gnutls.org Wed Feb 29 10:08:44 2012 From: nmav at gnutls.org (Nikos Mavrogiannopoulos) Date: Wed, 29 Feb 2012 10:08:44 +0100 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <20120229085054.GA29344@mhcomputing.net> References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> <87linmxckd.fsf@latte.josefsson.org> <20120229085054.GA29344@mhcomputing.net> Message-ID: On Wed, Feb 29, 2012 at 9:50 AM, Matthew Hall wrote: >> I have updated the libopts in GnuTLS with the code from the tarball in >> the autogen 5.15 release. ?It didn't look like there were a lot of >> changes though... ?Matthew, can you check if the problem is resolved in >> git master? The fix was already included under commit c6ecdd8fa190fe2efddc03631d9f754368a3c25f. regards, Nikos From simon at josefsson.org Wed Feb 29 10:17:15 2012 From: simon at josefsson.org (Simon Josefsson) Date: Wed, 29 Feb 2012 10:17:15 +0100 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: (Nikos Mavrogiannopoulos's message of "Wed, 29 Feb 2012 10:08:44 +0100") References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> <87linmxckd.fsf@latte.josefsson.org> <20120229085054.GA29344@mhcomputing.net> Message-ID: <87wr76vw10.fsf@latte.josefsson.org> Nikos Mavrogiannopoulos writes: > On Wed, Feb 29, 2012 at 9:50 AM, Matthew Hall wrote: > >>> I have updated the libopts in GnuTLS with the code from the tarball in >>> the autogen 5.15 release. ?It didn't look like there were a lot of >>> changes though... ?Matthew, can you check if the problem is resolved in >>> git master? > > The fix was already included under commit > c6ecdd8fa190fe2efddc03631d9f754368a3c25f. Ah, great. /Simon From bkorb at gnu.org Wed Feb 29 16:19:01 2012 From: bkorb at gnu.org (Bruce Korb) Date: Wed, 29 Feb 2012 07:19:01 -0800 Subject: GnuTLS 3.0.14 gnutls-serv segfaults when an invalid number is passed to --debug In-Reply-To: <877gz6xbne.fsf@latte.josefsson.org> References: <20120225025947.GA17318@mhcomputing.net> <4F4936A8.8090601@gnu.org> <20120225212317.GA20047@mhcomputing.net> <4F4955D6.2090906@gnu.org> <87linmxckd.fsf@latte.josefsson.org> <20120229085054.GA29344@mhcomputing.net> <877gz6xbne.fsf@latte.josefsson.org> Message-ID: <4F4E41E5.1020603@gnu.org> On 02/29/12 00:54, Simon Josefsson wrote: >>>> You are right. I was asleep at the wheel. Please try: >>>> >>>> http://autogen.sourceforge.net/data/autogen-5.15pre15.tar.xz > I don't immediately see anything that solve this problem though. Bruce, > was the fix for this problem included in the 5.15 release? I sometimes fall asleep (become inattentive), but so far I've not put a fix into a pre-release that wasn't in the final release. The fix for this was _really_ tiny: @@ -55,10 +51,10 @@ optionShowRange(tOptions* pOpts, tOptDesc* pOD, void * rng_table, int rng_ct) if (pOpts != OPTPROC_EMIT_USAGE) { if (pOpts <= OPTPROC_EMIT_LIMIT) return; - pz_indent = onetab; + pz_indent = ONE_TAB_STR; fprintf(option_usage_fp, zRangeErr, pOpts->pzProgName, - pOD->pz_Name, pOD->optArg.argString); + pOD->pz_Name, pOD->optArg.argInt); pz_indent = ""; } and the format string was changed from "%s" to "%ld". So, it's fixed.