Skip to content

gnutls 3.8.10 triggers valgrind Conditional jump or move depends on uninitialised value(s)

Hello,

gnutls 3.8.10 breaks gsasl's Debian CI test on ppc64el. debian/tests/gsasl-mailutils-gs2krb5-gssapi which fails with:

327s ==2630== Command: /usr/bin/gsasl -m GSSAPI -d --no-starttls --imap ci-255-07bddaf3 19835 -z debci
327s ==2630==
327s Trying ‘ci-255-07bddaf3’...
327s * OK IMAP4rev1

327s . CAPABILITY
327s * CAPABILITY IMAP4rev1 NAMESPACE ID IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1 AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20 AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5

327s . OK CAPABILITY Completed

327s . AUTHENTICATE GSSAPI
327s +

327s ==2630== Conditional jump or move depends on uninitialised value(s)
327s ==2630==    at 0x40420F0: strcmp (strcmp.S:76)
327s ==2630==    by 0x40198E3: _dl_name_match_p (dl-misc.c:75)
327s ==2630==    by 0x401A833: dl_open_worker_begin (dl-open.c:614)
327s ==2630==    by 0x400163B: _dl_catch_exception (dl-catch.c:241)
327s ==2630==    by 0x401A35F: dl_open_worker (dl-open.c:761)
327s ==2630==    by 0x400163B: _dl_catch_exception (dl-catch.c:241)
327s ==2630==    by 0x401BCCB: _dl_open (dl-open.c:874)
327s ==2630==    by 0x4C873F3: dlopen_doit (dlopen.c:56)
327s ==2630==    by 0x400163B: _dl_catch_exception (dl-catch.c:241)
327s ==2630==    by 0x40017BB: _dl_catch_error (dl-catch.c:260)
327s ==2630==    by 0x4C86CD7: _dlerror_run (dlerror.c:138)
327s ==2630==    by 0x4C87503: dlopen_implementation (dlopen.c:71)
327s ==2630==    by 0x4C87503: dlopen@@GLIBC_2.34 (dlopen.c:81)
327s ==2630==
[...]
327s ==2630== 
327s ==2630== HEAP SUMMARY:
327s ==2630==     in use at exit: 11,519 bytes in 58 blocks
327s ==2630==   total heap usage: 2,773 allocs, 2,715 frees, 397,284 bytes allocated
327s ==2630== 
327s ==2630== LEAK SUMMARY:
327s ==2630==    definitely lost: 16 bytes in 1 blocks
327s ==2630==    indirectly lost: 0 bytes in 0 blocks
327s ==2630==      possibly lost: 0 bytes in 0 blocks
327s ==2630==    still reachable: 11,503 bytes in 57 blocks
327s ==2630==         suppressed: 0 bytes in 0 blocks
327s ==2630== Rerun with --leak-check=full to see details of leaked memory
327s ==2630== 
327s ==2630== Use --track-origins=yes to see where uninitialised values come from
327s ==2630== For lists of detected and suppressed errors, rerun with: -s
327s ==2630== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0)

(--track-origins=yes does not yield additional details).

I have run git bisect on master - The error is triggered by

[66b78875] x509: support decoding of ML-DSA private keys in CHOICE format