Bugzilla Bug 235098

After upgrade to net-libs/gnutls-2.5.3 subversion fails with "Ohhhh jeeee:
operation is not possible without initialized secure memory"

Reproducible: Always

Steps to Reproduce:
1.Upgrade to net-libs/gnutls-2.5.3
2.Run svn up on some repository
3.

While this may not be relevant, if library version has changed,
revdep-rebuild may be necessary.

(In reply to comment #1)
> While this may not be relevant, if library version has changed,
> revdep-rebuild may be necessary.
> 

No, revdep-rebuild says the linking is consistend, even rebuilding subversion
didn't help.

indeed, I'm experiencing this too on my work machine.

Portage 2.2_rc8 (default-linux/amd64/2007.0, gcc-4.3.1, glibc-2.8_p20080602-r0,
2.6.25-gentoo-r4 x86_64)
=================================================================
System uname:
Linux-2.6.25-gentoo-r4-x86_64-AMD_Turion-tm-_64_X2_Mobile_Technology_TL-50-with-glibc2.2.5
Timestamp of tree: Sun, 17 Aug 2008 22:15:01 +0000
distcc 2.18.3 x86_64-pc-linux-gnu (protocols 1 and 2) (default port 3632)
[disabled]
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p39
dev-lang/python:     2.5.2-r7
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.2.5
sys-apps/sandbox:    1.2.18.1-r3
sys-devel/autoconf:  2.13, 2.62-r1
sys-devel/automake:  1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1-r1
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   2.2.4
virtual/os-headers:  2.6.25-r4
ACCEPT_KEYWORDS="amd64 ~amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=athlon64 -O2 -g -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf
/etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/splash /etc/terminfo
/etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=athlon64 -O2 -g -pipe"
DISTDIR="/var/tmp/distfiles"
FEATURES="ccache distlocks multilib-strict parallel-fetch preserve-libs sandbox
sfperms splitdebug strict test unmerge-orphans userfetch"
GENTOO_MIRRORS="http://213.186.33.37/gentoo-distfiles/
http://213.186.33.38/gentoo-distfiles/
ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/"
LANG="fr_FR.UTF-8"
LC_ALL="fr_FR.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu"
LINGUAS="fr en ja"
MAKEOPTS="-j3"
PKGDIR="/var/tmp/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --stats --timeout=180 --exclude=/distfiles
--exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/nouveau
/usr/portage/local/layman/voip /usr/portage/local/layman/sunrise
/home/eva/devel/overlay/comwax /home/eva/devel/overlay/gentoo-misc"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X a52 aac accessibility acl acpi alsa amd64 avahi bash-completion
bogofilter bzip2 cairo cdr cjk cli cracklib crypt cups curl daap dbus dga dri
dvd dvdr eds encode evo exif ffmpeg flac freewnn galago glitz gnome
gnome-keyring gnutls gphoto2 gpm gstreamer gtk gtkhtml hal iconv ipv6 isdnlog
jpeg kqemu laptop ldap libgda libnotify logrotate mad mmx mpeg mudflap
musicbrainz nautilus ncurses networkmanager nfs nls nntp nptl nptlonly ntp ogg
openct opengl openmp pam pcre pdf perl png ppds pppd pth python readline
reflection sasl session smp spell spl sqlite sse sse2 ssl svg sysfs tcpd theora
threads tracker unicode urandom usb v4l vim-syntax vorbis x264 xattr xcb
xinerama xml xorg xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp
atiixp-modem bt87x ca0106 cmipci emu10k1x   ens1370 ens1371 es1938 es1968 fm801
hda-intel intel8x0 intel8x0m maestro3       trident usb-audio via82xx
via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop
empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul
mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="dav dav_fs
authn_file auth_digest authz_groupfile authz_host dir mime" CAMERAS="directory
ptp2" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev synaptics"
KERNEL="linux" LINGUAS="fr en ja" USERLAND="GNU" VIDEO_CARDS="vesa nv nouveau"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_COMPRESS,
PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

It's a bug in GnuTLS.
I received a patch from GnuTLS upstream.
http://lists.gnu.org/archive/html/gnutls-devel/2008-08/msg00013.html

Created an attachment (id=163200) [edit]
gnutls-2.5.3-fix-initialization-order.patch

(In reply to comment #5)
> Created an attachment (id=163200) [edit]
> gnutls-2.5.3-fix-initialization-order.patch
> 

Could you create ebuild with this patch, and insert it into your overlay?

(In reply to comment #6)

Please reopen this bug. The problem is in a package which is in gentoo-x86, so
the patch should be added to gnutls in gentoo-x86.

Ok. Could you add upadted ebuild to your overlay?

I confirmed this bug and other applications that is using gnutls are fixed too
by this patch.
(kazehakase,sylpheed ...)
I guess this is critical bug, so new version will release within few days ...

Created an attachment (id=163223) [edit]
Patch to gnutls-2.5.3.ebuild

(In reply to comment #8)

Save the patch from Comment #10 as /tmp/gnutls-2.5.3.ebuild.patch and apply it
using these commands:

cd /usr/portage
patch -p0 < /tmp/gnutls-2.5.3.ebuild.patch
ebuild net-libs/gnutls/gnutls-2.5.3.ebuild manifest

(In reply to comment #11)

Off course, first copy gnutls-2.5.3-fix-initialization-order.patch to
/usr/portage/net-libs/gnutls/files.

added gnutls-2.5.4 to correct problem. Thanks all

*** Bug 235215 has been marked as a duplicate of this bug. ***