Brad Hards wrote:
I'm coming across a lot of valgrind warnings for the BN code. Eg:
==20718== Conditional jump or move depends on uninitialised value(s)
==20718== at 0x4E34666D: bn_mul_recursive (bn_mul.c:111)
==20718== by 0x4E3475D2: BN_mul (bn_mul.c:708)
==20718== by 0x4E34D1CC: BN_mod_mul_montgomery (bn_mont.c:89)
==20718== by 0x4E3448B0: BN_mod_exp_mont (bn_exp.c:411)
==20718== by 0x4E353A04: RSA_eay_public_encrypt (rsa_eay.c:172)
==20718== by 0x4E3557BF: RSA_public_encrypt (rsa_lib.c:280)
==20718== by 0x4E37CD79: EVP_PKEY_encrypt (p_enc.c:82)
==20718== by 0x4E3AE53E: PKCS7_dataInit (pk7_doit.c:234)
==20718== by 0x4E3B0353: PKCS7_encrypt (pk7_smime.c:396)
or
==20718== Conditional jump or move depends on uninitialised value(s)
==20718== at 0x4E346115: bn_cmp_words (bn_lib.c:784)
==20718== by 0x4E346639: bn_mul_recursive (bn_mul.c:108)
==20718== by 0x4E3475D2: BN_mul (bn_mul.c:708)
==20718== by 0x4E34D1CC: BN_mod_mul_montgomery (bn_mont.c:89)
==20718== by 0x4E3448B0: BN_mod_exp_mont (bn_exp.c:411)
==20718== by 0x4E353A04: RSA_eay_public_encrypt (rsa_eay.c:172)
==20718== by 0x4E3557BF: RSA_public_encrypt (rsa_lib.c:280)
==20718== by 0x4E37CD79: EVP_PKEY_encrypt (p_enc.c:82)
==20718== by 0x4E3AE53E: PKCS7_dataInit (pk7_doit.c:234)
==20718== by 0x4E3B0353: PKCS7_encrypt (pk7_smime.c:396)
(I've got lots! - mainly in BN as shown above, but also "use of uninitialised
value of size 4" in DES/PKCS7. especially in dx86-elf.s)
I'd rather not just suppress all of these, because they might indicate where
I'm doing something wrong, rather than an openssl issue.
Does anyone have a set of valgrind suppressions for openssl 0.9.7 (any
version, ideally 0.9.7g though)? Would you be willing to make them available?
a lot of these warnings are caused by the fact that openssl uses
uninitialized memory when creating random numbers etc. . They should
be harmless but you may try to build openssl with the "-DPURIFY" to
reduce the number of warnings.
Nils
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
