- 19 Mar, 2019 1 commit
-
-
Jaeden Amero authored
-
- 01 Mar, 2019 4 commits
-
-
Manuel Pégourié-Gonnard authored
The test used 3DES as the suite for SSLv3, which now makes the handshake fails with "no ciphersuite in common", failing the test as well. Use Camellia instead (as there are not enough AES ciphersuites before TLS 1.2 to distinguish between the 3 versions). Document some dependencies, but not all. Just trying to avoid introducing new issues by using a new cipher here, not trying to make it perfect, which is a much larger task out of scope of this commit.
-
Andres Amaya Garcia authored
-
Andres Amaya Garcia authored
-
Andres Amaya Garcia authored
-
- 18 Feb, 2019 1 commit
-
-
k-stachowiak authored
-
- 11 Feb, 2019 2 commits
-
-
Andres Amaya Garcia authored
-
Andrzej Kurek authored
This was an unused variable when compiling with parameter validation but without ecp_restartable
-
- 07 Feb, 2019 2 commits
-
-
Andres Amaya Garcia authored
-
Andres Amaya Garcia authored
-
- 05 Feb, 2019 1 commit
-
-
k-stachowiak authored
-
- 04 Feb, 2019 1 commit
-
-
Peter Kolbus authored
When all.sh invokes check_headers_in_cpp, a backup config.h exists. This causes a stray difference vs cpp_dummy_build.cpp. Fix by only collecting the *.h files in include/mbedtls. Change-Id: Ifd415027e856858579a6699538f06fc49c793570
-
- 29 Jan, 2019 1 commit
-
-
k-stachowiak authored
-
- 15 Jan, 2019 4 commits
-
-
Ron Eldor authored
Force using IPv4 in the GNU_CLI SRTP tests, as introduced for other tests in #1918.
-
Ron Eldor authored
Since `gnutls-cli` resolves `localhost` as an IPv6 address, and the server is bound to IPv4 address, gnutl-cli fails to negotiate DTLS sessions. Force the server to bind to IPv6 address, as a workaround.
-
Ron Eldor authored
Add some interoperability tests with openssl and gnutls, in ssl-opts.sh.
-
Ron Eldor authored
1. Add DTLS-SRTP tests in `ssl-opts.sh` 2. Add logs for the tests to filter. 3. Add function to get the profile informations.
-
- 10 Jan, 2019 10 commits
-
-
Gilles Peskine authored
Valgrind is what it does. `memcheck` is how it's implemented.
-
Gilles Peskine authored
Wildcard patterns now work with command line COMPONENT arguments without --except as well as with. You can now run e.g. `all.sh "check_*` to run all the sanity checks.
-
Gilles Peskine authored
The deletion of "$OUT_OF_SOURCE_DIR" had mistakenly been lumped together with Yotta and then removed when Yotta support was removed. Bring it back.
-
Gilles Peskine authored
After backing up and restoring config.h, `git diff-files` may report it as potentially-changed because it isn't sure whether the index is up to date. Use `git diff` instead: it actually reads the file.
-
Gilles Peskine authored
-
Gilles Peskine authored
It's all about tool detection.
-
Gilles Peskine authored
Don't require openssl, mingw, etc. if we aren't going to run a component that uses them.
-
Gilles Peskine authored
Only look for armcc if component_build_armcc is to be executed, instead of requiring the option --no-armcc. You can still pass --no-armcc, but it's no longer required when listing components to run. With no list of components or an exclude list on the command line, --no-armcc is equivalent to having build_armcc in the exclude list.
-
Gilles Peskine authored
Build the list of components to run in $RUN_COMPONENTS as part of command line parsing. After parsing the command line, it no longer matters how this list was built.
-
Gilles Peskine authored
Extract the list of available components by looking for definitions of functions called component_xxx. The previous code explicitly listed all components in run_all_components, which opened the risk of forgetting to list a component there. Add a conditional execution facility: if a function support_xxx exists and returns false then component_xxx is not executed (except when the command line lists an explicit set of components to execute).
-
- 09 Jan, 2019 5 commits
-
-
Gilles Peskine authored
MAKEFLAGS was set to -j if it was already set, instead of being set if not previously set as intended. So now all.sh will do parallel builds if invoked without MAKEFLAGS in the environment.
-
Gilles Peskine authored
Don't bail out of all.sh if the OS isn't Linux. We only expect everything to pass on a recent Linux x86_64, but it's useful to call all.sh to run some components on any platform. In all.sh, always run both MemorySanitizer and Valgrind. Valgrind is slower than ASan and MSan but finds some things that they don't. Run MSan unconditionally, not just on Linux/x86_64. MSan is supported on some other OSes and CPUs these days. Use `all.sh --except test_memsan` if you want to omit MSan because it isn't supported on your platform. Use `all.sh --except test_memcheck` if you want to omit Valgrind because it's too slow. Make the test scripts more portable (tested on FreeBSD): don't insist on GNU sed, and recognize amd64 as well as x86_64 for `uname -m`. The `make` utility must still be GNU make.
-
Gilles Peskine authored
Call `set disable-randomization off` only if it seems to be supported. The goal is to neither get an error about disable-randomization not being supported (e.g. on FreeBSD), nor get an error if it is supported but fails (e.g. on Ubuntu). Only fiddle with disable-randomization from all.sh, which cares because it reports the failure of ASLR disabling as an error. If a developer invokes the Gdb script manually, a warning about ASLR doesn't matter.
-
Gilles Peskine authored
Use `cmake -D CMAKE_BUILD_TYPE=Asan` rather than manually setting `-fsanitize=address`. This lets cmake determine the necessary compiler and linker flags. With UNSAFE_BUILD on, force -Wno-error. This is necessary to build with MBEDTLS_TEST_NULL_ENTROPY.
-
Gilles Peskine authored
Only whitespace changes in this commit.
-
- 02 Jan, 2019 8 commits
-
-
Gilles Peskine authored
In all.sh, always save config.h before running a component, instead of doing it manually in each component that requires it (except when we forget, which has happened). This would break a script that requires config.h.bak not to exist, but we don't have any of those.
-
Gilles Peskine authored
-
Gilles Peskine authored
Allow the list to use wildcards, e.g. you can run the sanity checks with all.sh --except "test_*" "build_*"
-
Gilles Peskine authored
-
Gilles Peskine authored
Add an option to list the available components. This is not useful yet, but a subsequent commit will add the ability to run specific components.
-
Gilles Peskine authored
-
Gilles Peskine authored
Call cleanup from run_component instead of calling it from each individual component function. Clean up after each component rather than before. With the new structure it makes more sense for each component to leave the place clean. Run cleanup once at the beginning to start from a clean slate.
-
Gilles Peskine authored
-