In what condition can J can be initialized < 0?
Do you have some idea?

Thanks for writing the report - that is better than having your report ticked
only in my mail folder.

on vacation, will test when I am home.

I believe 1.6.5 has no problem.

This has been fixed in 1.6.4 or earlier.
We won't fix it for 1.5.

Thanks for this info

to be released with 1.6.5

This _might_ have been fixed in 1.6.4

Thanks for the report. Please add the stack trace here (either inline or as an
attactment) so that it does not get lost. Thanks.

Here's something i got from running dbx with benchmark (with "check -access" option
to detect illegal memory access):

dbx benchmark

Reading benchmark
Reading ld.so.1
Reading libgcrypt.so.20.0.4
Reading libgpg-error.so.0.17.0
Reading librt.so.1
Reading libsocket.so.1
Reading libc.so.1
Reading libgcc_s.so.1
Reading libaio.so.1
Reading libmd.so.1
Reading libnsl.so.1
(dbx) check -access
access checking - ON
(dbx) run --verbose
Running: benchmark --verbose
(process id 20779)
Reading rtcapihook.so
Reading libdl.so.1
Reading rtcaudit.so
Reading libmapmalloc.so.1
Reading libgen.so.1
Reading libm.so.2
Reading libm_hwcap1.so.2
Reading libc_psr.so.1
Reading rtcboot.so
Reading librtc.so
RTC: Enabling Error Checking...
RTC: Running program...

...

Algorithm generate 100*sign 100*verify

RSA 1024 bit Read from uninitialized (rui):
Attempting to read 1 byte at address 0xffbfeba8

which is 312 bytes above the current stack pointer

stopped in add_randomness at line 1085 in file "random-csprng.c"
1085 rndpool[pool_writepos++] ^= *p++;
(dbx)

Hope this helps solve the issue.

I'm sorry, do you mean the zip file that i uploaded earlier? That was just
screenshots of the output message which i listed in my second post. It's just
benchmark and keygen, and i am pretty sure both errors are related to ECC key
generation.

It's my first time using this site, please let me know if i need to provide more
information. And thanks!

And that other bug report was?
You have full user permissions and thus you may comment on all bug reports.

Can't seem to edit my first post, so create this second post to provide extra info.

Ran all tests in libgcrypt/libgcrypt-1.6.4/tests directory, benchmark and keygen
failed. Here's the output:

./benchmark --verbose

.
.
.

Algorithm generate 100*sign 100*verify

RSA 1024 bit 310ms 1040ms 50ms
RSA 2048 bit 2370ms 7070ms 150ms
RSA 3072 bit 15950ms 21660ms 340ms
RSA 4096 bit 139410ms 47920ms 620ms
DSA 1024/160 - 600ms 820ms
DSA 2048/224 - 2920ms 3940ms
DSA 3072/256 - 6730ms 9520ms
ECDSA 192 bit
Segmentation Fault (core dumped)

./keygen --verbose
keygen: creating 1024 bit RSA key
keygen: creating 512 bit RSA key with e=257
keygen: creating 512 bit RSA key with default e
keygen: public exponent: 29
keygen: creating 1024 bit Elgamal key
keygen: creating 5 1024 bit DSA keys
keygen: creating 1536 bit DSA key
keygen: creating ECC key using curve NIST P-521
Segmentation Fault (core dumped)

the OS shows ld is resolved to GNU ld:
$ which ld
/home/alelai/binutils-2.25/bin/ld

not sure why configure script pick up the ccs version.
I tried:
export LD=/home/alelai/binutils-2.25/bin/ld

configure shows:
...
checking if the linker (/home/alelai/binutils-2.25/bin/ld) is GNU ld... yes
...
(please see the attached new config.log.20160107)

But the error occurred:

Assembler:

"/var/tmp//ccFCDwOq.s", line 25 : Syntax error
Near line: " addl $(Loop-L0-3),%eax"

Makefile:590: recipe for target 'mpih-add1-asm.lo' failed
make[2]: * [mpih-add1-asm.lo] Error 1
make[2]: Leaving directory '/home/alelai/libgcrypt-1.6.4.src/mpi'
Makefile:477: recipe for target 'all-recursive' failed
make[1]: * [all-recursive] Error 1
make[1]: Leaving directory '/home/alelai/libgcrypt-1.6.4.src'
Makefile:408: recipe for target 'all' failed
make: *** [all] Error 2

According to the posted config log this seems to be about
SunOS 5.10 on i86.

The extra option CC=-m32 is used with configure.

gcc versions is 5.2.
The linker is /usr/ccs/bin/ld, i.e. not GNU ld.

or well, gcrypt-devel in this case.

Duplicate of T1701

Please do not postarbitray pacthes to the tracker. Patches need to go to
gnupg-devel instead.

I'd be happy to implement this, but it is not clear to me how. Merely base64
encode the default representation? Or the canonical representation?

Pretty old. We should re-evaluate this for the 1.7 release.

The patches are now rebased on top of f7505b550dd591e33d3a3fab9277c43c460f1bad.

In addition to these a modified rsa generator is needed to be FIPS 186-4 compliant.

We ended up using this patch from Fedora:
http://pkgs.fedoraproject.org/cgit/libgcrypt.git/tree/libgcrypt-1.6.3-rsa-fips-keygen.patch

D253: 718_0011-Fix-testsuite-after-the-FIPS-adjustments.patch

D254: 717_0010-Add-new-pss-option-to-fipsdrv.patch

D255: 716_0009-Add-possibility-to-specify-salt-length-for-PSS-verif.patch

D256: 715_0008-fipsdrv-Add-support-for-RSA-keygen-tests.patch

D257: 714_0007-Fixes-for-RSA-testsuite-in-FIPS-mode.patch

D258: 713_0005-Use-2048-bit-RSA-keys-for-selftest.patch

D259: 712_0004-Disable-non-allowed-algorithms-in-FIPS-mode.patch

D260: 711_0003-PBKDF2-add-upper-bound-for-derived-key-length.patch

D261: 710_0002-ECDSA-adjustments-for-FIPS-186-4.patch

D262: 709_0001-DSA-adjustments-to-conform-with-FIPS-186-4.patch

For 1.6, please see:

    commit d501cc4edd55d3953d7581b3f8ff0c348df31ef0
    commit 24f6c65e36edec13aa781862ff1ff45ca3e99b99

Please test.

Thank you for the patch. I apply to master.
I'm going to apply to 1.6.

See attached for fix with sun studio's compiler.

D324: 692_patch-sunstudio

Your gpg-error packages does not match its development version. Check the
configure output or ask on gcrypt-devel for help.

os uname -r = 2.6.32-5gnewsense1-amd64

micro uname -m = x86_64

libgcrypt-1.6.4# make check
Making check in compat
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/compat'
make[1]: No se hace nada para `check'.
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/compat'
Making check in mpi
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/mpi'
make[1]: No se hace nada para `check'.
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/mpi'
Making check in cipher
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/cipher'
make[1]: No se hace nada para `check'.
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/cipher'
Making check in random
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/random'
make[1]: No se hace nada para `check'.
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/random'
Making check in src
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/src'
make[1]: No se hace nada para `check'.
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/src'
Making check in doc
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/doc'
make check-am
make[2]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/doc'
make[2]: No se hace nada para `check-am'.
make[2]: se sale del directorio `/home/g1/libgcrypt-1.6.4/doc'
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/doc'
Making check in tests
make[1]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/tests'
make check-TESTS
make[2]: se ingresa al directorio `/home/g1/libgcrypt-1.6.4/tests'
./version: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
version:1.6.4:
ciphers:arcfour:blowfish:cast5:des:aes:twofish:serpent:rfc2268:seed:camellia:idea:salsa20:gost28147:
pubkeys:dsa:elgamal:rsa:ecc:
digests:crc:gostr3411-94:md4:md5:rmd160:sha1:sha256:sha512:tiger:whirlpool:stribog:
rnd-mod:linux:
cpu-arch:x86:
mpi-asm:amd64/mpih-add1.S:amd64/mpih-sub1.S:amd64/mpih-mul1.S:amd64/mpih-mul2.S:amd64/mpih-mul3.S:amd64/mpih-lshift.S:amd64/mpih-rshift.S:
threads:none:
hwflist:intel-cpu:intel-ssse3:
fips-mode:n:n:
rng-type:standard:1:
PASS: version
./mpitests: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./mpitests: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: mpitests
./tsexp: /usr/lib/libgpg-error.so.0: no version information available (required
by ./tsexp)
./tsexp: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./tsexp: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: tsexp
./t-convert: /usr/lib/libgpg-error.so.0: no version information available
(required by ./t-convert)
./t-convert: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./t-convert: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: t-convert
./t-mpi-bit: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./t-mpi-bit: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: t-mpi-bit
./t-mpi-point: /usr/lib/libgpg-error.so.0: no version information available
(required by ./t-mpi-point)
./t-mpi-point: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./t-mpi-point: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: t-mpi-point
./curves: /usr/lib/libgpg-error.so.0: no version information available (required
by ./curves)
./curves: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./curves: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: curves
./t-lock: /usr/lib/libgpg-error.so.0: no version information available (required
by ./t-lock)
./t-lock: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
PASS: t-lock
./prime: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./prime: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: prime
./basic: /usr/lib/libgpg-error.so.0: no version information available (required
by ./basic)
./basic: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./basic: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: basic
./keygen: /usr/lib/libgpg-error.so.0: no version information available (required
by ./keygen)
./keygen: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./keygen: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: keygen
./pubkey: /usr/lib/libgpg-error.so.0: no version information available (required
by ./pubkey)
./pubkey: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./pubkey: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: pubkey
./hmac: /usr/lib/libgpg-error.so.0: no version information available (required
by ./hmac)
./hmac: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./hmac: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: hmac
./hashtest: /usr/lib/libgpg-error.so.0: no version information available
(required by ./hashtest)
./hashtest: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./hashtest: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: hashtest
./t-kdf: /usr/lib/libgpg-error.so.0: no version information available (required
by ./t-kdf)
./t-kdf: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./t-kdf: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: t-kdf
./keygrip: /usr/lib/libgpg-error.so.0: no version information available
(required by ./keygrip)
./keygrip: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./keygrip: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: keygrip
./fips186-dsa: /usr/lib/libgpg-error.so.0: no version information available
(required by ./fips186-dsa)
./fips186-dsa: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./fips186-dsa: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: fips186-dsa
./aeswrap: /usr/lib/libgpg-error.so.0: no version information available
(required by ./aeswrap)
./aeswrap: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./aeswrap: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: aeswrap
./pkcs1v2: /usr/lib/libgpg-error.so.0: no version information available
(required by ./pkcs1v2)
./pkcs1v2: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./pkcs1v2: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
FAIL: pkcs1v2
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: /usr/lib/libgpg-error.so.0: no version information available (required
by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./random: relocation error: /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20:
symbol gpg_err_set_errno, version GPG_ERROR_1.0 not defined in file
libgpg-error.so.0 with link time reference
random: running './random --in-recursion --prefer-fips-rng' failed
FAIL: random
./dsa-rfc6979: /usr/lib/libgpg-error.so.0: no version information available
(required by ./dsa-rfc6979)
./dsa-rfc6979: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./dsa-rfc6979: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: dsa-rfc6979
./t-ed25519: /usr/lib/libgpg-error.so.0: no version information available
(required by ./t-ed25519)
./t-ed25519: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
./t-ed25519: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: t-ed25519
./benchmark: /usr/lib/libgpg-error.so.0: no version information available
(required by ./benchmark)
./benchmark: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
Note: benchmark running in quick regression test mode.
MD5 0ms 0ms 30ms 10ms./benchmark: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: benchmark
./bench-slope: /usr/lib/libgpg-error.so.0: no version information available
(required by ./bench-slope)
./bench-slope: /usr/lib/libgpg-error.so.0: no version information available
(required by /home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20)
Note: bench-slope running in quick regression test mode.
Hash:

|  nanosecs/byte   mebibytes/sec   cycles/byte

./bench-slope: relocation error:
/home/g1/libgcrypt-1.6.4/src/.libs/libgcrypt.so.20: symbol gpg_err_set_errno,
version GPG_ERROR_1.0 not defined in file libgpg-error.so.0 with link time reference
FAIL: bench-slope

SKIP: hashtest-256g

22 of 24 tests failed
(1 test was not run)

Please report to http://bugs.gnupg.org

make[2]: * [check-TESTS] Error 1
make[2]: se sale del directorio `/home/g1/libgcrypt-1.6.4/tests'
make[1]: * [check-am] Error 2
make[1]: se sale del directorio `/home/g1/libgcrypt-1.6.4/tests'
make: *** [check-recursive] Error 1

os uname -r = 2.6.32-5gnewsense1-amd64

micro uname -m = x86_64

1.6.4 has been released

1.6.4 has been released.

On 2015-09-07 3:24 PM, Werner Koch via BTS wrote:

Werner Koch<wk@gnupg.org> added the comment:

It is a common practise to use enums instead of macros to help debugging code.
In fact the GNU coding standard suggest this use.

It is also common practise for *C* code to use int and enums interchangable.
Right, we use an unsigned int but that is justified because we do not have
negative values.

The only problem I am ware of is the OS/2 (and maybe also the AIX) compiler
which makes the internal size of an enum type depend on the largest use value
(e.g. a 16 bit short instead of a 32 bit int). However, this is rarely a
problem and gpg_err_code_t anyway requires more than 16 bits.

If you can tell me an option for xlc to disable the warnings/error I can add
this to configure script. A pragma would also do.

As I search for possible compiler settings I find the following:

Thank you, I'll send the DCO.
Also, I'll rebase the patches against current git master and adjust them to
conform with the doc/HACKING requirements.

Fixed in 1.6.4.

Fixed in 1.6.4.