From gnutls-devel at lists.gnutls.org Thu Jul 2 12:15:41 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Thu, 02 Jul 2026 10:15:41 +0000 Subject: [gnutls-devel] GnuTLS | mem: define symbol aliases for memory allocation functions (!2033) In-Reply-To: References: Message-ID: Daiki Ueno commented on a discussion on devel/symbols.last: https://gitlab.com/gnutls/gnutls/-/merge_requests/2033#note_3516557471 > gnutls_base64_encode2 at GNUTLS_3_6_0 > gnutls_buffer_append_data at GNUTLS_3_4 > gnutls_bye at GNUTLS_3_4 > -gnutls_calloc at GNUTLS_3_4 > +gnutls_calloc@(GNUTLS_3_4) OK, thanks for the confirmation. According to the manual: ``` If the version is the default version to be used when resolving unversioned references to the symbol then it's displayed as is, otherwise it's put into parentheses. ``` and we are defining two different versions of those symbols, I think it's OK to keep it as is. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2033#note_3516557471 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-acvgpj3jqlutebj15r3f5kf2z-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Thu Jul 2 12:16:25 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Thu, 02 Jul 2026 10:16:25 +0000 Subject: [gnutls-devel] GnuTLS | mem: define symbol aliases for memory allocation functions (!2033) In-Reply-To: References: Message-ID: Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/2033#note_3516559999 Rebased and added a configure check for `.symver`. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2033#note_3516559999 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-c5bj2kaaoqpom727h0ppuj5f5-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Mon Jul 6 09:36:28 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Mon, 06 Jul 2026 07:36:28 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) References: Message-ID: Daiki Ueno created a merge request: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 Project:Branches: dueno/gnutls:wip/dueno/no-asm to gnutls/gnutls:master Author: Daiki Ueno Previously, `make asm-sources` ran cpp for assembly files for some reason, which prevented the compile time check for PACBTI. This removes the invocation of `gcc -E` for simplicity, though it might break something on the system. Supersedes !2103. ## Checklist * [x] Commits have `Signed-off-by:` with name/author being identical to the commit author * [ ] Code modified for feature * [ ] Test suite updated with functionality tests * [ ] Test suite updated with negative tests * [ ] Documentation updated / NEWS entry present (for non-trivial changes) ## Reviewer's checklist: * [ ] Any issues marked for closing are addressed * [ ] There is a test suite reasonably covering new functionality or modifications * [ ] Function naming, parameters, return values, types, etc., are consistent and according to `CONTRIBUTION.md` * [ ] This feature/change has adequate documentation added * [ ] No obvious mistakes in the code -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-1co30m493kbp6vyipv68yzz4q-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Mon Jul 6 09:37:39 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Mon, 06 Jul 2026 07:37:39 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3525994985 @ggardet @wcrobertarm could any of you check this? -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3525994985 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-elrgmvr74l27vfajwnsg0vv3t-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Mon Jul 6 11:02:46 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Mon, 06 Jul 2026 09:02:46 +0000 Subject: [gnutls-devel] GnuTLS | mem: define symbol aliases for memory allocation functions (!2033) In-Reply-To: References: Message-ID: Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/2033#note_3526315903 @jas @ametzler @rockdaboot I think this is a safe change from the compatibility point of view, but if you could review and spot any pitfalls that would be appreciated. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2033#note_3526315903 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-cjp3uf2nd3wqqdg5svl58m4nh-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Mon Jul 6 11:29:44 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Mon, 06 Jul 2026 09:29:44 +0000 Subject: [gnutls-devel] GnuTLS | --with-tests always passed to src/gl (#1912) In-Reply-To: References: Message-ID: Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/work_items/1912#note_3526435748 A quick fix for this would be to add the patching to `bootstrap_post_import_hook` after importing `src/gl`, enclosing `SUBDIR += . tests` with `if ENABLE_TESTS ... endif` with sed. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/work_items/1912#note_3526435748 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-aztxj7w2coevy1zyrrcr7hiqe-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 7 00:32:59 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Mon, 06 Jul 2026 22:32:59 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: William Roberts commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3529851205 @dueno, ill test tomorrow. The only thing standing out to me is the rename from .s to .S. IIRC, those files are sourced from openssl or something through `make update-asm` (or some make target), does the rename break that? What does it look like when we need to update these source files? I do like dropping hardcoded stuff from the makefile, thats, almost, always a win. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3529851205 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-b964uol9s5xqk0eof5e78fxc0-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 7 01:33:50 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Mon, 06 Jul 2026 23:33:50 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 was reviewed by William Roberts -- William Roberts started a new discussion on cfg.mk: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3529985521 > - rm -f $@tmp > +lib/accelerated/aarch64/macosx/%.S: devel/perlasm/%.pl .submodule.stamp > CC=aarch64-linux-gnu-gcc perl $< ios64 \ Do you know why the compiler is still getting swapped here to CC? Why wouldn't we use the system or user supplied CC value? -- William Roberts started a new discussion on cfg.mk: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3529985525 > - rm -f $@tmp > +lib/accelerated/aarch64/elf/%.S: devel/perlasm/%.pl lib/accelerated/aarch64/aarch64-common.h .submodule.stamp > CC=aarch64-linux-gnu-gcc perl $< linux64 \ This isn't part of your patch, but I wonder if these can go away too at some point, and just use CC. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-5zljxp4h71l9satb9ll8sg9tc-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 7 23:34:48 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 07 Jul 2026 21:34:48 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: William Roberts commented on a discussion on cfg.mk: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534249934 > - echo "" >> $@.tmp.S > - sed -i 's/OPENSSL_armcap_P/_gnutls_arm_cpuid_s/g' $@.tmp.S > - sed -i 's/arm_arch.h/aarch64-common.h/g' $@.tmp.S > - aarch64-linux-gnu-gcc $(CFLAGS) -D__ARM_MAX_ARCH__=8 -Ilib/accelerated/aarch64 -Wa,--noexecstack -E $@.tmp.S -o $@.tmp.s > - cat $<.license $@.tmp.s > $@ > + cat $<.license $@.tmp > $@ && rm -f $@.tmp > + echo "" >> $@ > echo ".section .note.GNU-stack,\"\",%progbits" >> $@ > - rm -f $@.tmp.S $@.tmp.s $@.tmp > + sed -i 's/OPENSSL_armcap_P/_gnutls_arm_cpuid_s/g' $@ > + sed -i 's/arm_arch.h/aarch64-common.h/g' $@ > > -lib/accelerated/aarch64/macosx/%.s: devel/perlasm/%.pl .submodule.stamp > - rm -f $@tmp > +lib/accelerated/aarch64/macosx/%.S: devel/perlasm/%.pl .submodule.stamp > CC=aarch64-linux-gnu-gcc perl $< ios64 \ Yeah these can go as well. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534249934 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-0zyz1v08tartnr6m6fubbs1k7-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 7 23:39:18 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 07 Jul 2026 21:39:18 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 was reviewed by William Roberts -- William Roberts started a new discussion: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534257897 LGTM, we could also drop the setting of CC to a cross compiler for aarch64 in another patch, you don't need them. The compiler should be the same one used to compile the whole thing, so if you're cross compiling, whatever CC is set to, or just `gcc` if your compiling for the host with defaults. ``` Reviewed-by: Bill Roberts Tested-by: Bill Roberts ``` -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-9kjwd97xcbd2yk8okluiz02r2-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 00:21:49 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 07 Jul 2026 22:21:49 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Daiki Ueno commented on a discussion on cfg.mk: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534367035 > - echo "" >> $@.tmp.S > - sed -i 's/OPENSSL_armcap_P/_gnutls_arm_cpuid_s/g' $@.tmp.S > - sed -i 's/arm_arch.h/aarch64-common.h/g' $@.tmp.S > - aarch64-linux-gnu-gcc $(CFLAGS) -D__ARM_MAX_ARCH__=8 -Ilib/accelerated/aarch64 -Wa,--noexecstack -E $@.tmp.S -o $@.tmp.s > - cat $<.license $@.tmp.s > $@ > + cat $<.license $@.tmp > $@ && rm -f $@.tmp > + echo "" >> $@ > echo ".section .note.GNU-stack,\"\",%progbits" >> $@ > - rm -f $@.tmp.S $@.tmp.s $@.tmp > + sed -i 's/OPENSSL_armcap_P/_gnutls_arm_cpuid_s/g' $@ > + sed -i 's/arm_arch.h/aarch64-common.h/g' $@ > > -lib/accelerated/aarch64/macosx/%.s: devel/perlasm/%.pl .submodule.stamp > - rm -f $@tmp > +lib/accelerated/aarch64/macosx/%.S: devel/perlasm/%.pl .submodule.stamp > CC=aarch64-linux-gnu-gcc perl $< ios64 \ Indeed, I see CC is used in `x86_64-xlate.pl` but not in `arm-xlate.pl`, so I guess we can drop it altogether. I will remove it. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534367035 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-983an50mojk3akp3tshwyzayb-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 01:07:14 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 07 Jul 2026 23:07:14 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: All discussions on merge request !2117 were resolved by Daiki Ueno https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-13h4q3z4rkebj3i3or6wt0ej8-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 01:07:13 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 07 Jul 2026 23:07:13 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Daiki Ueno commented on a discussion: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534452890 Thank you for the review and testing. I've removed CC setting. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3534452890 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-d7e8ekem8t42ekeq90wmvx9al-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 01:13:35 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 07 Jul 2026 23:13:35 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Zolt?n Fridrich was added as a reviewer. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-8jq72ok0xpewcj2ci2yi1gm02-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 10:04:06 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Wed, 08 Jul 2026 08:04:06 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Zolt?n Fridrich commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3535442592 LGTM -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117#note_3535442592 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-9krexwsxy5h2hxkqiyoqjowzq-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 10:04:06 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Wed, 08 Jul 2026 08:04:06 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Merge request !2117 was approved by Zolt?n Fridrich Merge request URL: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 Project:Branches: dueno/gnutls:wip/dueno/no-asm to gnutls/gnutls:master Author: Daiki Ueno Assignees: Reviewer: Zolt?n Fridrich -- You're receiving this email because of your account on gitlab.com. -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Wed Jul 8 10:23:51 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Wed, 08 Jul 2026 08:23:51 +0000 Subject: [gnutls-devel] GnuTLS | accelerated: stop calling aarch64-linux-gnu-gcc -E on generated code (!2117) In-Reply-To: References: Message-ID: Merge request !2117 was merged Merge request URL: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 Project:Branches: dueno/gnutls:wip/dueno/no-asm to gnutls/gnutls:master Author: Daiki Ueno Reviewer: Zolt?n Fridrich -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2117 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-bem5ghrai4i100fxqtm3q2nlq-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Fri Jul 10 02:12:16 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Fri, 10 Jul 2026 00:12:16 +0000 Subject: [gnutls-devel] GnuTLS | bootstrap: propagate ENABLE_TESTS to src/gl/ after gnulib import (!2118) References: Message-ID: Daiki Ueno created a merge request: https://gitlab.com/gnutls/gnutls/-/merge_requests/2118 Project:Branches: dueno/gnutls:wip/dueno/disable-tests to gnutls/gnutls:master Author: Daiki Ueno Fixes: #1912 ## Checklist * [x] Commits have `Signed-off-by:` with name/author being identical to the commit author * [ ] Code modified for feature * [ ] Test suite updated with functionality tests * [ ] Test suite updated with negative tests * [ ] Documentation updated / NEWS entry present (for non-trivial changes) ## Reviewer's checklist: * [ ] Any issues marked for closing are addressed * [ ] There is a test suite reasonably covering new functionality or modifications * [ ] Function naming, parameters, return values, types, etc., are consistent and according to `CONTRIBUTION.md` * [ ] This feature/change has adequate documentation added * [ ] No obvious mistakes in the code -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2118 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-95hijh7bktzot1hzw2ut25eum-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Fri Jul 10 02:12:54 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Fri, 10 Jul 2026 00:12:54 +0000 Subject: [gnutls-devel] GnuTLS | --with-tests always passed to src/gl (#1912) In-Reply-To: References: Message-ID: Daiki Ueno commented: https://gitlab.com/gnutls/gnutls/-/work_items/1912#note_3543855765 I've filed !2118. @craigcarnell does it suffice? -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/work_items/1912#note_3543855765 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-930bjrc88wnmczhsw7zwf7nbs-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 14 18:33:23 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 14 Jul 2026 16:33:23 +0000 Subject: [gnutls-devel] libtasn1 | coding: rewrite _asn1_tag_der() to avoid the tag buffer overrun (#49) (!126) References: Message-ID: Thomas Grainger created a merge request: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126 Project:Branches: graingert/libtasn1:fix-asn1-tag-der-overrun to gnutls/libtasn1:master Author: Thomas Grainger Rewrites `_asn1_tag_der()` as a single pass that writes the tag number straight to the output, most significant digit first, emitting at most `ASN1_MAX_TAG_SIZE - 1` continuation bytes. The result always fits in `ASN1_MAX_TAG_SIZE`, so the one-byte overrun in the old reverse-copy loop (issue #49) is impossible by construction, as suggested by @jas in the issue. The old truncation behaviour for over-long tags is preserved. Adds `tests/Test_tag.c` covering: * positive: `[APPLICATION 200000]` (needs the full three base-128 tag bytes) encodes to the known-good DER; * negative: `[APPLICATION 2097152]` (a tag too large to encode) stays within `ASN1_MAX_TAG_SIZE` ? before the rewrite this produced a nine-byte tag and AddressSanitizer reports a stack-buffer-overflow in `_asn1_tag_der`. Closes #49 -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17627195/sent_notifications/5-conm8ohhq9fxo8uashu73jyfx-aht8b/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 14 18:39:24 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 14 Jul 2026 16:39:24 +0000 Subject: [gnutls-devel] libtasn1 | coding: rewrite _asn1_tag_der() to avoid the tag buffer overrun (#49) (!126) In-Reply-To: References: Message-ID: Simon Josefsson commented: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126#note_3557854614 Thanks -- great with a test case as well. Reading this code will require some attention... I'm not sure why the pipeline doesn't kick in? Did we lose GitLab premium access again? -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126#note_3557854614 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17627195/sent_notifications/5-25zjno8ukny4kawsun8s5p6k2-aht8b/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 14 18:41:59 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 14 Jul 2026 16:41:59 +0000 Subject: [gnutls-devel] libtasn1 | coding: rewrite _asn1_tag_der() to avoid the tag buffer overrun (#49) (!126) In-Reply-To: References: Message-ID: Simon Josefsson commented on a discussion: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126#note_3557867280 I enabled pipelines again and started it, not sure why it was disabled. I'll try to get CI/CD on master green, I assume it will not look pretty after ~11 months disabled. -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126#note_3557867280 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17627195/sent_notifications/5-1eqh2e8rdqbd8e30pmqfd9rpy-aht8b/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Tue Jul 14 19:48:48 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Tue, 14 Jul 2026 17:48:48 +0000 Subject: [gnutls-devel] libtasn1 | coding: rewrite _asn1_tag_der() to avoid the tag buffer overrun (#49) (!126) In-Reply-To: References: Message-ID: Simon Josefsson commented on a discussion: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126#note_3558143544 Now master pipeline should soon be green -- feel free to rebase and I'll try to review this -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/-/merge_requests/126#note_3558143544 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17627195/sent_notifications/5-b8jvzr5gbfjwcg9wdhsurk55t-aht8b/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: From gnutls-devel at lists.gnutls.org Thu Jul 16 12:34:46 2026 From: gnutls-devel at lists.gnutls.org (Read-only notification of GnuTLS library development activities) Date: Thu, 16 Jul 2026 10:34:46 +0000 Subject: [gnutls-devel] GnuTLS | Solaris (OpenIndiana) parameter handling problem in certtool (#1916) References: Message-ID: Issue created by Thomas Dreibholz: https://gitlab.com/gnutls/gnutls/-/work_items/1916 ## Description of problem: I am testing with platform-independent scripts from the [X.509-Tools](https://www.nntb.no/~dreibh/system-tools/#x.509-tools) (Git: [https://github.com/dreibh/system-tools](https://github.com/dreibh/system-tools)), which tests CA hierarchies and certificates under different operating systems (multiple Linux distributions, FreeBSD, NetBSD, OpenBSD, MacOS). Background is to make sure that the CA/certificate setup works on all systems. Currently, I am experimenting with Solaris ([OpenIndiana](https://www.openindiana.org/), 2026.04 version). Under Solaris, `certtool --verify` fails: ``` $ certtool --verify --verify-profile=future --load-ca-certificate=PATH_TO_CA.crt --infile=PATH_TO_USER_CERT.crt certtool: ambiguous option -- verify ``` The same certtool call works fine under Linux, the BSDs, and MacOS. The problems seems to be the strict handling of long options under Solaris: certtool has multiple options with prefix `--verify`: ``` -e, --verify-chain Verify a PEM encoded certificate chain --verify Verify a PEM encoded certificate (chain) against a trusted set --verify-hostname=str Specify a hostname to be used for certificate chain verification --verify-email=str Specify a email to be used for certificate chain verification - prohibits the option 'verify-hostname' --verify-purpose=str Specify a purpose OID to be used for certificate chain verification --verify-allow-broken Allow broken algorithms, such as MD5 for verification --verify-profile=str Specify a security level profile to be used for verification ``` A solution could be to give the option a different name (e.g. `--verify-with-ca`), or a short option (`-E`). At the moment, it is not possible to verify a chain with a CA certificate under Solaris with GnuTLS certtool, i.e. an important feature is broken under Solaris. ## Version of gnutls used: 3.8.13 ``` (x509) nornetpp at openindiana:~/src/system-tools/src/X509$ uname -a SunOS openindiana 5.11 illumos-2b7388bd44 i86pc i386 i86pc (x509) nornetpp at openindiana:~/src/system-tools/src/X509$ certtool --version certtool 3.8.13 ``` ## Distributor of gnutls (e.g., Ubuntu, Fedora, RHEL) OpenIndiana ``` (x509) nornetpp at openindiana:~/src/system-tools/src/X509$ pkg publisher PUBLISHER TYPE STATUS P LOCATION openindiana.org origin online F https://pkg.openindiana.org/hipster/ localhostoih origin online F http://sfe.opencsw.org/localhostoih/ ``` -- Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/work_items/1916 You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/namespace/17175643/sent_notifications/5-ed0vakpmjgqlq8n9ew4skobyw-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help -------------- next part -------------- An HTML attachment was scrubbed... URL: