Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 271186 - app-crypt/truecrypt-6.2 exhibits problems with append-flags on amd64
Summary: app-crypt/truecrypt-6.2 exhibits problems with append-flags on amd64
Status: RESOLVED DUPLICATE of bug 271141
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: AMD64 Linux
: High normal (vote)
Assignee: Crypto team [DISABLED]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-05-25 10:22 UTC by Ronny Cooper
Modified: 2009-05-25 13:25 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build log of TrueCrypt-6.2 (build.log,28.61 KB, text/plain)
2009-05-25 10:56 UTC, Ronny Cooper
Details
Kernel-2.6.29.4 Config File (config,64.24 KB, text/plain)
2009-05-25 11:01 UTC, Ronny Cooper
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ronny Cooper 2009-05-25 10:22:25 UTC
emerge truecrypt-6.2 fails under kernel 2.6.29.4 

Compiling SecurityToken.cpp
x86_64-pc-linux-gnu-g++ -MMD -I/var/tmp/portage/app-crypt/truecrypt-6.2/work/truecrypt-6.2-source -I/var/tmp/portage/app-crypt/truecrypt-6.2/work/truecrypt-6.2-source/Crypto -I/usr/include/pkcs11-helper-1.0 -O2 -fno-strict-aliasing   -DTC_UNIX -DTC_LINUX -fdata-sections -ffunction-sections -Wall -Wno-sign-compare -Wno-unused-parameter  -c ../Common/SecurityToken.cpp -o ../Common/SecurityToken.o
In file included from ../Common/SecurityToken.h:43,
                 from ../Common/SecurityToken.cpp:25:
/usr/include/pkcs11-helper-1.0/pkcs11.h:1263:1: warning: "NULL_PTR" redefined
In file included from ../Common/SecurityToken.cpp:25:
../Common/SecurityToken.h:20:1: warning: this is the location of the previous definition
../Common/SecurityToken.cpp: In member function 'TrueCrypt::Pkcs11Exception::operator std::string() const':
../Common/SecurityToken.cpp:660: error: 'CKR_NEW_PIN_MODE' was not declared in this scope
../Common/SecurityToken.cpp:661: error: 'CKR_NEXT_OTP' was not declared in this scope
make[1]: *** [../Common/SecurityToken.o] Error 1
make[1]: Leaving directory `/var/tmp/portage/app-crypt/truecrypt-6.2/work/truecrypt-6.2-source/Volume'
make: *** [all] Error 2
 *
 * ERROR: app-crypt/truecrypt-6.2 failed.
 * Call stack:
 *               ebuild.sh, line   48:  Called src_compile
 *             environment, line 3409:  Called die
 * The specific snippet of code:
 *       emake ${EXTRA} NOSTRIP=1 NOTEST=1 VERBOSE=1 CC="$(tc-getCC)" CXX="$(tc-getCXX)" AR="$(tc-getAR)" RANLIB="$(tc-getRANLIB)" TC_EXTRA_CFLAGS="${CFLAGS}" TC_EXTRA_CXXFLAGS="${CXXFLAGS}" TC_EXTRA_LFLAGS="${LDFLAGS}" WX_CONFIG="${WX_CONFIG}" PKCS11_INC="${pkcs11_include_directory}" || die "emake failed"
 *  The die message:
 *   emake failed
 *
 * If you need support, post the topmost build error, and the call stack if relevant.
 * A complete build log is located at '/var/tmp/portage/app-crypt/truecrypt-6.2/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/app-crypt/truecrypt-6.2/temp/environment'.
 *



Reproducible: Always




Portage 2.1.6.11 (default/linux/amd64/2008.0, gcc-4.3.2, glibc-2.8_p20080602-r1, 2.6.29.4 x86_64)
=================================================================
System uname: Linux-2.6.29.4-x86_64-Pentium-R-_Dual-Core_CPU_E5200_@_2.50GHz-with-glibc2.2.5
Timestamp of tree: Mon, 25 May 2009 07:30:01 +0000
app-shells/bash:     3.2_p39
dev-java/java-config: 2.1.7
dev-lang/python:     2.4.4-r14, 2.5.4-r2
dev-python/pycrypto: 2.0.1-r8
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63
sys-devel/automake:  1.5, 1.7.9-r1, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=nocona -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"
CXXFLAGS=""
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="ftp://ftp.join.uni-muenster.de/pub/linux/distributions/gentoo http://de-mirror.org/distro/gentoo/ ftp://de-mirror.org/distro/gentoo/ "
LDFLAGS="-Wl,-O1"
LINGUAS="de en"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac aalib acl acpi alsa amd64 apache2 avahi avi berkdb bzip2 cairo caps cdparanoia chroot cli cracklib crypt ctype cups divx dri dv dvd dynamicplugin emacs encode ffmpeg firefox flac fortran gd gdbm gestreamer gif glitz gnome gphoto2 gpm gstreamer gtk hal hardened hardenedphp iconv idn imap innodb ipv6 isdnlog jpeg jpeg2k libwww lm_sensor maildir mhash midi mmx mmxext mozilla mp3 mpeg mplayer mudflap multilib mysql ncurses nls nptl nptlonly nsplugin ogg ogg-vobis openmp pam pcre perl php png pppd python readline reflection sasl server session slang sndfile spl sse sse2 sse3 ssl svg sysfs tcpd threads tiff tk truetype unicode vlc worker xml xorg xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn _dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host  authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk _cache env expires ext_filter file_cache filter headers ident imagemap include i nfo log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy _balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id  userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de en" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 intel mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY
Comment 1 Ronny Cooper 2009-05-25 10:56:27 UTC
Created attachment 192393 [details]
build log of TrueCrypt-6.2
Comment 2 Ronny Cooper 2009-05-25 11:01:47 UTC
Created attachment 192394 [details]
Kernel-2.6.29.4 Config File
Comment 3 Mike Auty (RETIRED) gentoo-dev 2009-05-25 11:05:55 UTC
This error also occurs on gentoo-sources-2.6.27-r8, so I'm not sure if this is kernel related...
Comment 4 Ronny Cooper 2009-05-25 11:17:23 UTC
(In reply to comment #3)
> This error also occurs on gentoo-sources-2.6.27-r8, so I'm not sure if this is
> kernel related...
> 

hmm, but it worked on my old linux-2.6.28-gentoo-r5 kernel
Comment 5 Mike Auty (RETIRED) gentoo-dev 2009-05-25 11:27:40 UTC
Ok, doing a little searching, it appears this requires a particular copy of some header files.  Both of my troubled machines have pkcs11-helper installed, whereas both of my unaffected machines don't.  Checking the ebuild there's:

        if has_version dev-libs/pkcs11-helper; then
                pkcs11_include_directory="/usr/include/pkcs11-helper-1.0"
        else
                pkcs11_include_directory="/usr/include/opensc"
        fi

So my guess is that the pkcs11-helper files aren't quite up to scratch.  Apparently these defines are just for error messages, so we've got a few possible solutions:

1) Try and get pkcs11-helper fixed upstream.
2) Try and get pkcs11-helper patched by Gentoo.
3) Patch out the required lines in truecrypt (see [1])
4) Only rely on opensc for headers.

4 seems to be the easiest, with 1 being the cleanest...

[1] http://penguinenclave.blogspot.com/2008/12/truecrypt-61-install-guide-for-fedora.html
Comment 6 Ronny Cooper 2009-05-25 11:53:41 UTC
(In reply to comment #5)
> Ok, doing a little searching, it appears this requires a particular copy of
> some header files.  Both of my troubled machines have pkcs11-helper installed,
> whereas both of my unaffected machines don't.  Checking the ebuild there's:
> 
>         if has_version dev-libs/pkcs11-helper; then
>                 pkcs11_include_directory="/usr/include/pkcs11-helper-1.0"
>         else
>                 pkcs11_include_directory="/usr/include/opensc"
>         fi
> 
> So my guess is that the pkcs11-helper files aren't quite up to scratch. 
> Apparently these defines are just for error messages, so we've got a few
> possible solutions:
> 
> 1) Try and get pkcs11-helper fixed upstream.
> 2) Try and get pkcs11-helper patched by Gentoo.
> 3) Patch out the required lines in truecrypt (see [1])
> 4) Only rely on opensc for headers.
> 
> 4 seems to be the easiest, with 1 being the cleanest...
> 
> [1]
> http://penguinenclave.blogspot.com/2008/12/truecrypt-61-install-guide-for-fedora.html
> 


doesn't work with pkcs11-helper-1.07, but 3) works for me ;-) thnx and greetz
R.C.
Comment 7 Mike Auty (RETIRED) gentoo-dev 2009-05-25 12:32:02 UTC
Sorry Ronny, I think you misunderstood.  Could you please check whether the machine(s) you're having the problem on have pkcs11-helper installed?  My guess is that they do.

The workaround for this would be to unmerge pkcs11-helper, then emerge truecrypt (and then if necessary, re-install pkcs11-helper)...
Comment 8 Mike Auty (RETIRED) gentoo-dev 2009-05-25 12:32:42 UTC
Also, this bug should stay open, since the root cause hasn't been fixed, we've just found a workaround.
Comment 9 Ronny Cooper 2009-05-25 13:03:19 UTC
sorry for that...
pkcs11-helper-1.06 was running on the machine, before i updated to 1.07...

unmerge pkcs11-helper and then emerge truecrypt doesn't work
Comment 10 Mike Auty (RETIRED) gentoo-dev 2009-05-25 13:25:38 UTC
You're right, my bad, they've already worked around it in the ebuild by appending it to the flags sent to the compiler, but it seems under amd64 that just isn't working for some reason...

After a little more digging this proves to be a duplicate of bug 271141.

*** This bug has been marked as a duplicate of bug 271141 ***