dist: xenial sudo: required osx_image: xcode9.3 language: c cache: ccache git: submodules: false quiet: true before_install: - if [ -n "$COVERALLS" ]; then pip install --user cpp-coveralls; fi; - if expr "$CONFIG_OPTS" ":" ".*enable-external-tests" > /dev/null; then git submodule update --init --recursive; fi; - eval "${MATRIX_EVAL}" arch: - amd64 - arm64 os: - linux - osx compiler: - clang - gcc env: - CONFIG_OPTS="" DESTDIR="_install" # Note: This CONFIG_OPTS entry must match the value in the exclude: table below that contains env: CONFIG_OPTS , otherwise it will not find a match. - CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-rc5 enable-md2 -fsanitize=address" LSAN_OPTIONS="report_objects=1" - CONFIG_OPTS="no-asm no-makedepend enable-buildtest-c++ --strict-warnings -D_DEFAULT_SOURCE" BUILDONLY="yes" CHECKDOCS="yes" GENERATE="yes" CPPFLAGS="-ansi" matrix: include: - os: linux arch: arm64 dist: bionic compiler: clang env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes" - os: linux arch: arm64 compiler: clang addons: apt: packages: - clang-6.0 env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument" MATRIX_EVAL="CC=clang-6.0 && CXX=clang++-6.0" - os: linux arch: arm64 compiler: clang addons: apt: packages: - clang-6.0 env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" MATRIX_EVAL="CC=clang-6.0 && CXX=clang++-6.0" - os: linux arch: s390x compiler: gcc env: CONFIG_OPTS="--strict-warnings" - os: linux-ppc64le sudo: false compiler: clang env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES" - os: linux compiler: gcc env: CONFIG_OPTS="--strict-warnings" COMMENT="Move to the BORINGTEST build when interoperable" - os: linux dist: trusty compiler: clang env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" - os: linux dist: bionic compiler: clang env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes" - os: linux addons: apt: packages: - binutils-mingw-w64 - gcc-mingw-w64 compiler: i686-w64-mingw32-gcc env: CONFIG_OPTS="no-stdio" BUILDONLY="yes" # Uncomment if there is reason to believe that PPC-specific problem # can be diagnosed with this possibly >30 mins sanitizer build... #- os: linux-ppc64le # sudo: false # compiler: gcc # env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-ubsan no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES" - os: linux addons: apt: packages: - golang-1.10 compiler: gcc env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug --coverage no-asm enable-rc5 enable-md2 enable-ec_nistp_64_gcc_128 enable-ssl3 enable-ssl3-method enable-nextprotoneg enable-weak-ssl-ciphers no-shared enable-buildtest-c++ -DPEDANTIC -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION" COVERALLS="yes" BORINGSSL_TESTS="yes" CXX="g++" - os: linux addons: apt: packages: - golang-1.10 compiler: gcc # External test pyca-cryptography temporarily disabled due to long term travis failures env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-external-tests enable-buildtest-c++" BORINGSSL_TESTS="yes" CXX="g++" TESTS="test_external_boringssl test_external_krb5" - os: linux compiler: clang env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument" - os: linux compiler: clang env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" CXX="clang++" #Temporarily removed because memleak test fails for unknown reasons in this build. Other builds with memleak testing ("-fsanitize=address") are passing. # - os: linux # compiler: clang # env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-rc5 enable-md2 no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" - os: linux compiler: gcc env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug no-asm enable-ubsan enable-rc5 enable-md2 enable-buildtest-c++ -DPEDANTIC" OPENSSL_TEST_RAND_ORDER=0 - os: linux addons: apt: packages: - binutils-mingw-w64 - gcc-mingw-w64 compiler: i686-w64-mingw32-gcc env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic" - os: linux addons: apt: packages: - binutils-mingw-w64 - gcc-mingw-w64 compiler: x86_64-w64-mingw32-gcc env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic" - os: linux language: python python: 3.7 install: pip install flake8 before_script: # stop the build if there are Python syntax errors or undefined names - flake8 . --count --select=E901,E999,F821,F822,F823 --show-source --statistics # exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide - flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics script: true exclude: - os: linux compiler: clang - os: osx compiler: gcc - arch: arm64 os: osx # arm64 times out when using -fsanitize=address # The amd64 build should be sufficient to test this. # Note: the env line must exactly match the env line from the build # matrix above which contains the `-fsanitize=address` option. # TODO: come up with a better way of doing this that is less error prone. - arch: arm64 env: CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-rc5 enable-md2 -fsanitize=address" LSAN_OPTIONS="report_objects=1" before_script: - env - if [ "$TRAVIS_PULL_REQUEST" != "false" -a -n "$EXTENDED_TEST" ]; then (git log -1 $TRAVIS_COMMIT_RANGE | grep '\[extended tests\]' > /dev/null) || travis_terminate 0; fi - if [ -n "$DESTDIR" ]; then sh .travis-create-release.sh $TRAVIS_OS_NAME; tar -xzf _srcdist.tar.gz; mkdir _build; cd _build; srcdir=../_srcdist; top=..; else srcdir=.; top=.; fi - if [ "$CC" = i686-w64-mingw32-gcc ]; then export CROSS_COMPILE=${CC%%gcc}; unset CC; $srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format; elif [ "$CC" = x86_64-w64-mingw32-gcc ]; then export CROSS_COMPILE=${CC%%gcc}; unset CC; $srcdir/Configure mingw64 $CONFIG_OPTS -Wno-pedantic-ms-format; else if which ccache >/dev/null && test "$BORINGSSL_TESTS" != yes; then CC="ccache $CC"; fi; $srcdir/config -v $CONFIG_OPTS; fi - ./configdata.pm --dump - cd $top script: - if [ -z "$BUILDONLY" ]; then make="make -s"; else make="make"; fi - if [ -n "$GENERATE" ]; then make2="$make PERL=no-perl"; else make2="$make"; fi - top=${PWD} - if [ -n "$DESTDIR" ]; then cd _build; fi - if ! $make update; then echo -e '\052\052 FAILED -- MAKE UPDATE'; travis_terminate 1; fi - if ! git diff --exit-code; then echo -e '\052\052 FAILED -- UPDATED FILES NOT COMMITTED'; travis_terminate 1; fi - if test -n "$GENERATE" && ! $make build_all_generated; then echo -e '\052\052 FAILED -- MAKE BUILD_ALL_GENERATED'; travis_terminate 1; fi - if test -n "$CHECKDOCS" && ! $make doc-nits; then echo -e '\052\052 FAILED -- MAKE DOC-NITS'; travis_terminate 1; fi - if ! $make2; then echo -e '\052\052 FAILED -- MAKE'; travis_terminate 1; fi; - if [ -z "$BUILDONLY" ]; then if [ -n "$CROSS_COMPILE" ]; then sudo dpkg --add-architecture i386; sudo apt-get update; sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install wine; export EXE_SHELL="wine" WINEPREFIX=`pwd`; fi; if [ -e krb5/src ]; then sudo apt-get -yq install bison dejagnu gettext keyutils ldap-utils libldap2-dev libkeyutils-dev python-cjson python-paste python-pyrad slapd tcl-dev tcsh; fi; if ! HARNESS_VERBOSE_FAILURE=yes BORING_RUNNER_DIR=$top/boringssl/ssl/test/runner make test; then echo -e '\052\052 FAILED -- MAKE TEST'; travis_terminate 1; fi; else if ! $make build_tests >~/build.log 2>&1; then echo -e '\052\052 FAILED -- MAKE BUILD_TESTS'; cat ~/build.log travis_terminate 1; fi; fi - if [ -n "$DESTDIR" ]; then mkdir "$top/$DESTDIR"; if ! $make install DESTDIR="$top/$DESTDIR" >~/install.log 2>&1 ; then echo -e '\052\052 FAILED -- MAKE INSTALL'; cat ~/install.log; travis_terminate 1; fi; fi - cd $top - echo -e '\052\052 DONE' after_success: - if [ -n "$COVERALLS" ]; then coveralls -b . --gcov gcov --gcov-options '\-lpbc'; fi; notifications: email: secure: "xeGNgWO7aoaDgRvcZubposqMsj36aU8c6F0oHfw+rUqltCQ14IgYCUwzocmR2O+Pa7B3Cx5VjMfBFHbQaajZsfod8vu7g+aGq/zkjwbhsr/SR4dljJjFJXLGZjIalm9KgP6KInmVDuINfCqP+MHIY5lZkNI7DMcyHDhVc5nSKvCXV7xTDNgmstvh8rB/z51WfHDqGqfBtiuK5FDNxmvYK8OFJ5W94Lu9LDlizcxwK3GAj7arOui7Z5w8bQ6p4seUE3IvJL1Zbj0pZHxvNb6Zeb2Pn8QF1qLlN8YmBktD4aiw0ce4wYRiL87uLgcOxZY7SVXtv2XYFIYWapU/FKjCqa6vK93V/H9eZWEIYNMKnN3wXm2beqVdnKek3OeGJ8v0y7MbSfuLfRtBqbTSNYnpU1Zuo4MQAvHvEPuwCAYkYQajOSRplMH5sULFKptuVqNtOMfjL8jHb8AEoL1acYIk43ydxeYrzzas4fqgCDJ52573/u0RNdF1lkQBLkuM365OB8VRqtpnoxcdEIY/qBc/8TzZ24fxyrs5qdHFcxGSgpN2EP6cJMqpvkemnCNSdhxUqfzm22N7a3O8+4LFSBGOnHto/PwdsvF/01yGYL0LoZTnoO1i6x7AMJPBh+eyDU0ZjGhj/msjmqeb9C8vRqQ+1WjHrIS1iqCD0Czib8tUPD4="