atom feed21 messages in org.freebsd.freebsd-securityRe: Updated OpenSSL patches
FromSent OnAttachments
Kosaku NagasakaFeb 24, 2003 4:01 pm 
KIMURA YasuhiroFeb 24, 2003 4:59 pm 
Jacques A. VidrineFeb 24, 2003 6:04 pm 
Jacques A. VidrineFeb 24, 2003 6:20 pm 
Jacques A. VidrineFeb 24, 2003 7:44 pm 
KIMURA YasuhiroFeb 25, 2003 6:30 am 
Krzysztof PtaszekFeb 25, 2003 7:53 am 
Jacques A. VidrineFeb 25, 2003 12:12 pm 
KIMURA YasuhiroFeb 26, 2003 4:08 pm 
Jacques A. VidrineFeb 26, 2003 4:50 pm 
Gareth HopkinsFeb 27, 2003 12:56 am 
KIMURA YasuhiroFeb 27, 2003 8:05 am.Other
Jacques A. VidrineFeb 27, 2003 8:09 am 
KIMURA YasuhiroFeb 27, 2003 8:48 am 
Chris SamaritoniFeb 27, 2003 9:36 am 
Crist J. ClarkFeb 27, 2003 3:58 pm 
Jacques A. VidrineFeb 28, 2003 6:01 am 
Duncan Patton a CampbellFeb 28, 2003 5:09 pm 
Jacques A. VidrineMar 1, 2003 6:18 am 
KIMURA YasuhiroMar 3, 2003 7:10 am 
Jacques A. VidrineMar 3, 2003 7:38 am 
Subject:Re: Updated OpenSSL patches
From:Jacques A. Vidrine (nec@FreeBSD.org)
Date:Feb 28, 2003 6:01:39 am
List:org.freebsd.freebsd-security

On Thu, Feb 27, 2003 at 03:59:01PM -0800, Crist J. Clark wrote:

On Fri, Feb 28, 2003 at 01:49:01AM +0900, KIMURA Yasuhiro wrote:

"Jacques A. Vidrine" <nec@FreeBSD.org> wrote:

I'm sorry, but I cannot reproduce the failure. :-(

Since nobody else seems to be in trouble, I can't help concluding that something is wrong with my environment. So I'm going to re-install OS this weekend, to check what will happen on the vanilla 4.7R environment, and to report it here.

I can reproduce the error. Something weird is going on with patch(1).

First, this DOES NOT produce the error,

$ uname -r 4.7-RELEASE-p2 $ cd /var/tmp $ [ -d src ] && rm -rf src $ cvs -Q co -rRELENG_4_7_0_RELEASE src/crypto/openssl $ cvs -Q co -rRELENG_4_7_0_RELEASE src/secure/lib/libcrypto $ cd src $ fetch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-03:02/openssl47.patch.gz $ zcat openssl47.patch.gz | patch -s

However, try,

$ cd /var/tmp $ [ -d src ] && rm -rf src $ cvs -Q co -rRELENG_4_7_0_RELEASE src/crypto/openssl $ cvs -Q co -rRELENG_4_7_0_RELEASE src/secure/lib/libcrypto $ cvs -Q co -rRELENG_4_7_0_RELEASE src/Makefile $ cd src $ fetch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-03:02/openssl47.patch.gz $ zcat openssl47.patch.gz | patch -s 1 out of 1 hunks failed--saving rejects to Makefile.rej

It looks like patch(1) is confused where to look for "Makefile." It tries to patch the one in pwd. However, if I do,

$ cd /var/tmp $ [ -d src ] && rm -rf src $ cvs -Q co -rRELENG_4_7_0_RELEASE src/crypto/openssl $ cvs -Q co -rRELENG_4_7_0_RELEASE src/secure/lib/libcrypto $ cvs -Q co -rRELENG_4_7_0_RELEASE src/Makefile $ cd src $ fetch
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/patches/SA-03:02/openssl47.patch.gz $ zcat openssl47.patch.gz | sed 's-../RELENG_4_7/--' | patch -s

Huh. *boggle* Applying the patch to an entire source tree succeeds as well. e.g.

cvs -Q co -rRELENG_4_7_0_RELEASE src

You didn't write anything after that last `zcat ...' line, but I'm led to believe that getting rid of the relative path in the patch file resolved the problem? If that is the case, I will remove that path from the existing patches and re-sign the patches.

Thanks for narrowing down the problem! Now, I don't suppose you want to find and fix the issue in patch(1), do you? :-)

Cheers,

-- Jacques A. Vidrine <nec@celabo.org> http://www.celabo.org/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvid@verio.net . nec@FreeBSD.org . nec@kth.se

To Unsubscribe: send mail to majo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message