Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 952905

Summary: dev-libs/openssl-3.3.3[asm]: Breakage on big endian ARMv9
Product: Gentoo Linux Reporter: Marcus Comstedt <marcus>
Component: Current packagesAssignee: Gentoo's Team for Core System packages <base-system>
Status: UNCONFIRMED ---    
Severity: normal CC: marcus
Priority: Normal Keywords: TESTFAILURE
Version: unspecified   
Hardware: ARM64   
OS: Linux   
See Also: https://github.com/openssl/openssl/issues/27197
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: upstreams patch

Description Marcus Comstedt 2025-03-29 11:47:16 UTC 
I got a nice new ARMv9 hardware (Radxa Orion O6) and wanted to try a big
endian Gentoo install on it.  I found that there was breakage in openssl-3.3.3
which is not there on my old ARMv8 system.  This breakage can be observed as:

* Failing tests with FEATURES=test (see list below)
* Truncated files when wgetting from https://cdn.kernel.org
* "bad message during authentication" errors from ssh client

All these work fine on the ARMv8 machine (Jetson TX2) using the same ebuild.

The failing tests are:

---8<---
Test Summary Report
-------------------
03-test_internal_chacha.t             (Wstat: 256 (exited 1) Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
05-test_cmac.t                        (Wstat: 256 (exited 1) Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
20-test_enc.t                         (Wstat: 1024 (exited 4) Tests: 99 Failed: 4)
  Failed tests:  87-88, 91-92
  Non-zero exit status: 4
20-test_enc_more.t                    (Wstat: 512 (exited 2) Tests: 141 Failed: 2)
  Failed tests:  136-137
  Non-zero exit status: 2
25-test_pkcs8.t                       (Wstat: 512 (exited 2) Tests: 15 Failed: 2)
  Failed tests:  14-15
  Non-zero exit status: 2
30-test_evp.t                         (Wstat: 512 (exited 2) Tests: 80 Failed: 2)
  Failed tests:  42, 50
  Non-zero exit status: 2
70-test_quic_record.t                 (Wstat: 256 (exited 1) Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
90-test_bio_enc.t                     (Wstat: 256 (exited 1) Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
Files=315, Tests=3694, 158 wallclock secs (11.21 usr  1.68 sys + 364.07 cusr 101.99 csys = 478.95 CPU)
Result: FAIL
---8<---

/proc/cpuinfo on the ARMv9 machine says:

---8<---
Features	: fp asimd evtstrm aes pmull sha1 sha2 crc32 atomics fphp asimdhp cpuid asimdrdm jscvt fcma lrcpc dcpop sha3 sm3 sm4 asimddp sha512 sve asimdfhm dit uscat ilrcpc flagm ssbs sb paca pacg dcpodp sve2 sveaes svepmull svebitperm svesha3 svesm4 flagm2 frint svei8mm svebf16 i8mm bf16 dgh bti ecv afp wfxt
CPU implementer	: 0x41
CPU architecture: 8
CPU variant	: 0x0
CPU part	: 0xd81
CPU revision	: 1
---8<---

while on the ARMv8 it says

---8<---
Features        : fp asimd evtstrm aes pmull sha1 sha2 crc32 cpuid
CPU implementer : 0x41
CPU architecture: 8
CPU variant     : 0x1
CPU part        : 0xd07
CPU revision    : 3
---8<---

so a qualified guess would be that the problem is in some code that gets
enabled by one of the new features.

If I emerge with USE=-asm, then everything seems to work.

Reproducible: Always

Steps to Reproduce:
1.in a big endian VM on ARMv9 hardware
2.env FEATURES=test emerge -1a dev-libs/openssl
3.
Actual Results:  
14 tests fail

Expected Results:  
no tests fail

Portage 3.0.67 (python 3.12.9-final-0, default/linux/arm64/23.0/split-usr/big-endian, gcc-13, glibc-2.40-r8, 6.6.74 aarch64_be)
=================================================================
System uname: Linux-6.6.74-aarch64_be-with-glibc2.40
KiB Mem:     8141404 total,   7035840 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Mon, 24 Mar 2025 11:45:00 +0000
Head commit of repository gentoo: b80ccdc33125a8b9f0945f66d037d9ea25b9f63a
sh bash 5.2_p37
ld GNU ld (Gentoo 2.44 p1) 2.44.0
app-misc/pax-utils:        1.3.8::gentoo
app-shells/bash:           5.2_p37::gentoo
dev-build/autoconf:        2.72-r1::gentoo
dev-build/automake:        1.17-r1::gentoo
dev-build/libtool:         2.5.4::gentoo
dev-build/make:            4.4.1-r100::gentoo
dev-build/meson:           1.7.0::gentoo
dev-lang/perl:             5.40.0-r1::gentoo
dev-lang/python:           3.12.9::gentoo, 3.13.2::gentoo
sys-apps/baselayout:       2.17::gentoo
sys-apps/openrc:           0.56::gentoo
sys-apps/sandbox:          2.39::gentoo
sys-devel/binutils:        2.44::gentoo
sys-devel/binutils-config: 5.5.2::gentoo
sys-devel/gcc:             13.3.1_p20241220::gentoo
sys-devel/gcc-config:      2.12.1::gentoo
sys-kernel/linux-headers:  6.12::gentoo (virtual/os-headers)
sys-libs/glibc:            2.40-r8::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    volatile: False
    sync-rsync-verify-max-age: 3
    sync-rsync-extra-opts: 
    sync-rsync-verify-jobs: 1
    sync-rsync-verify-metamanifest: yes

ACCEPT_KEYWORDS="arm64"
ACCEPT_LICENSE="@FREE"
CBUILD="aarch64_be-unknown-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="aarch64_be-unknown-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe"
DISTDIR="/var/cache/distfiles"
EMERGE_DEFAULT_OPTS="--autounmask"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg-live config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="C.UTF8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LEX="flex"
MAKEOPTS="-j4"
PKGDIR="/var/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
SHELL="/bin/bash"
USE="acl arm64 big-endian bzip2 crypt gdbm iconv ipv6 libtirpc ncurses nls openmp pam pcre readline seccomp split-usr ssl test-rust unicode xattr zlib" ADA_TARGET="gcc_14" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_ARM="edsp v8 vfp vfp-d32 vfpv3 vfpv4" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GUILE_SINGLE_TARGET="3-0" GUILE_TARGETS="3-0" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-2" POSTGRES_TARGETS="postgres16" PYTHON_SINGLE_TARGET="python3_12" PYTHON_TARGETS="python3_12" RUBY_TARGETS="ruby32" VIDEO_CARDS="fbdev dummy" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-03-29 11:51:32 UTC 
Thanks! openssl[asm] continues to be a pest. Would you mind reporting it upstream as well?
Comment 2 Marcus Comstedt 2025-03-29 12:50:27 UTC 
Now reported as
https://github.com/openssl/openssl/issues/27197
Comment 3 Marcus Comstedt 2025-04-02 21:11:53 UTC 
Created attachment 923535 [details, diff]
upstreams patch

The attached patch provided from upstreams by Bernd Edlinger
fixes the various failures.