Maxim Sobolev
2016-Mar-03 22:30 UTC
libssl ABI is broken in 10.3-BETA3 as compared to 10.2
Got this nice crash after switching base system from 10.2 to 10.3-beta
(without updating installing packages):
File "/usr/local/lib/python2.7/site-packages/cffi/verifier.py", line
207,
in _load_library
return self._vengine.load_library()
File "/usr/local/lib/python2.7/site-packages/cffi/vengine_cpy.py",
line
155, in load_library
raise ffiplatform.VerificationError(error)
cffi.ffiplatform.VerificationError: importing
'/usr/local/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_c57c27bax1bb7e9a6.so':
/usr/local/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_c57c27bax1bb7e9a6.so:
Undefined symbol "SSLv2_client_method"
That symbol is used to be defined in libssl.so.7:
freebsd10.2> $ nm -D /usr/lib/libssl.so.7 | grep
"SSLv2_client_method"
0000000000045630 T SSLv2_client_method
freebsd10.3> $ nm -D /usr/lib/libssl.so.7 | grep
"SSLv2_client_method"
freebsd10.3>
This suggests that somebody broke ABI of the library and forgot to bump the
version number. I think perhaps it's not too late to bump that now.
-Max
On Thu, Mar 03, 2016 at 02:30:53PM -0800, Maxim Sobolev wrote:> Got this nice crash after switching base system from 10.2 to 10.3-beta > (without updating installing packages): > > File "/usr/local/lib/python2.7/site-packages/cffi/verifier.py", line 207, > in _load_library > return self._vengine.load_library() > File "/usr/local/lib/python2.7/site-packages/cffi/vengine_cpy.py", line > 155, in load_library > raise ffiplatform.VerificationError(error) > cffi.ffiplatform.VerificationError: importing > '/usr/local/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_c57c27bax1bb7e9a6.so': > /usr/local/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_c57c27bax1bb7e9a6.so: > Undefined symbol "SSLv2_client_method" > > That symbol is used to be defined in libssl.so.7: > > freebsd10.2> $ nm -D /usr/lib/libssl.so.7 | grep "SSLv2_client_method" > 0000000000045630 T SSLv2_client_method > > freebsd10.3> $ nm -D /usr/lib/libssl.so.7 | grep "SSLv2_client_method" > freebsd10.3> > > This suggests that somebody broke ABI of the library and forgot to bump the > version number. I think perhaps it's not too late to bump that now. >We are aware of the issue, and working out a proper solution. Glen -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: not available URL: <http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20160303/25dc14bc/attachment.sig>