.travis.yml

   1 dist: xenial
   2 sudo: required
   3
   4 osx_image: xcode9.3
   5
   6 language: c
   7 cache: ccache
   8 git:
   9     submodules: false
  10     quiet: true
  11
  12 before_install:
  13     - if [ -n "$COVERALLS" ]; then
  14           pip install --user cpp-coveralls;
  15       fi;
  16     - if expr "$CONFIG_OPTS" ":" ".*enable-external-tests" > /dev/null; then
  17           git submodule update --init --recursive;
  18       fi;
  19     - eval "${MATRIX_EVAL}"
  20
  21 arch:
  22     - amd64
  23     - arm64
  24
  25 os:
  26     - linux
  27     - osx
  28
  29 compiler:
  30     - clang
  31     - gcc
  32
  33 env:
  34     - CONFIG_OPTS="" DESTDIR="_install"
  35     # Note: This CONFIG_OPTS entry must match the value in the exclude: table below that contains env: CONFIG_OPTS , otherwise it will not find a match.
  36     - CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-rc5 enable-md2 -fsanitize=address" LSAN_OPTIONS="report_objects=1"
  37     - CONFIG_OPTS="no-asm no-makedepend enable-buildtest-c++ --strict-warnings -D_DEFAULT_SOURCE" BUILDONLY="yes" CHECKDOCS="yes" GENERATE="yes" CPPFLAGS="-ansi"
  38
  39 matrix:
  40     include:
  41         - os: linux
  42           arch: arm64
  43           dist: bionic
  44           compiler: clang
  45           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes"
  46         - os: linux
  47           arch: arm64
  48           compiler: clang
  49           addons:
  50               apt:
  51                   packages:
  52                       - clang-6.0
  53           env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument" MATRIX_EVAL="CC=clang-6.0 && CXX=clang++-6.0"
  54         - os: linux
  55           arch: arm64
  56           compiler: clang
  57           addons:
  58               apt:
  59                   packages:
  60                       - clang-6.0
  61           env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" MATRIX_EVAL="CC=clang-6.0 && CXX=clang++-6.0"
  62         - os: linux
  63           arch: s390x
  64           compiler: gcc
  65           env: CONFIG_OPTS="--strict-warnings"
  66         - os: linux-ppc64le
  67           sudo: false
  68           compiler: clang
  69           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES"
  70         - os: linux
  71           compiler: gcc
  72           env: CONFIG_OPTS="--strict-warnings no-ec enable-trace enable-ssl-trace enable-zlib enable-zlib-dynamic enable-crypto-mdebug enable-crypto-mdebug-backtrace enable-egd" COMMENT="Move to the BORINGTEST build when interoperable"
  73         - os: linux
  74           dist: trusty
  75           compiler: clang
  76           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated"
  77         - os: linux
  78           dist: bionic
  79           compiler: clang
  80           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes"
  81         - os: linux
  82           addons:
  83               apt:
  84                   packages:
  85                       - binutils-mingw-w64
  86                       - gcc-mingw-w64
  87           compiler: i686-w64-mingw32-gcc
  88           env: CONFIG_OPTS="no-stdio" BUILDONLY="yes"
  89         # Uncomment if there is reason to believe that PPC-specific problem
  90         # can be diagnosed with this possibly >30 mins sanitizer build...
  91         #- os: linux-ppc64le
  92         #  sudo: false
  93         #  compiler: gcc
  94         #  env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-ubsan no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES"
  95         - os: linux
  96           addons:
  97               apt:
  98                   packages:
  99                       - golang-1.10
 100           compiler: gcc
 101           env:  EXTENDED_TEST="yes" CONFIG_OPTS="--debug --coverage no-asm enable-rc5 enable-md2 enable-ec_nistp_64_gcc_128 enable-ssl3 enable-ssl3-method enable-nextprotoneg enable-weak-ssl-ciphers no-shared enable-buildtest-c++ -DPEDANTIC -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION" COVERALLS="yes" BORINGSSL_TESTS="yes" CXX="g++"
 102         - os: linux
 103           addons:
 104               apt:
 105                   packages:
 106                       - golang-1.10
 107           compiler: gcc
 108           # External test pyca-cryptography temporarily disabled due to long term travis failures
 109           env:  EXTENDED_TEST="yes" CONFIG_OPTS="--debug enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-external-tests enable-buildtest-c++" BORINGSSL_TESTS="yes" CXX="g++" TESTS="test_external_boringssl test_external_krb5"
 110         - os: linux
 111           compiler: clang
 112           env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument"
 113         - os: linux
 114           compiler: clang
 115           env:  EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" CXX="clang++"
 116 #Temporarily removed because memleak test fails for unknown reasons in this build. Other builds with memleak testing ("-fsanitize=address") are passing.
 117 #        - os: linux
 118 #          compiler: clang
 119 #          env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-rc5 enable-md2 no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument"
 120         - os: linux
 121           compiler: gcc
 122           env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug no-asm enable-ubsan enable-rc5 enable-md2 enable-buildtest-c++ -DPEDANTIC" OPENSSL_TEST_RAND_ORDER=0
 123         - os: linux
 124           addons:
 125               apt:
 126                   packages:
 127                       - binutils-mingw-w64
 128                       - gcc-mingw-w64
 129           compiler: i686-w64-mingw32-gcc
 130           env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic"
 131         - os: linux
 132           addons:
 133               apt:
 134                   packages:
 135                       - binutils-mingw-w64
 136                       - gcc-mingw-w64
 137           compiler: x86_64-w64-mingw32-gcc
 138           env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic"
 139         - os: linux
 140           language: python
 141           python: 3.7
 142           install: pip install flake8
 143           before_script:
 144             # stop the build if there are Python syntax errors or undefined names
 145             - flake8 . --count --select=E901,E999,F821,F822,F823 --show-source --statistics
 146             # exit-zero treats all errors as warnings.  The GitHub editor is 127 chars wide
 147             - flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
 148           script: true
 149         - os: linux
 150           compiler: gcc
 151           env: CONFIGURE_TARGET="linux-generic32" CONFIG_OPTS="--strict-warnings no-shared no-dso no-pic no-aria no-async no-autoload-config no-blake2 no-bf no-camellia no-cast no-chacha no-cmac no-cms no-cmp no-comp no-ct no-des no-dgram no-dh no-dsa no-dtls no-ec2m no-engine no-filenames no-gost no-idea no-ktls no-mdc2 no-md4 no-multiblock no-nextprotoneg no-ocsp no-ocb no-poly1305 no-psk no-rc2 no-rc4 no-rmd160 no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-srp no-srtp no-ssl3 no-ssl3-method no-ts no-ui-console no-whirlpool no-asm -DOPENSSL_NO_SECURE_MEMORY -DOPENSSL_SMALL_FOOTPRINT"
 152     exclude:
 153         - os: linux
 154           compiler: clang
 155         - os: osx
 156           compiler: gcc
 157         - arch: arm64
 158           os: osx
 159         # arm64 times out when using -fsanitize=address
 160         # The amd64 build should be sufficient to test this.
 161         # Note: the env line must exactly match the env line from the build
 162         # matrix above which contains the `-fsanitize=address` option.
 163         # TODO: come up with a better way of doing this that is less error prone.
 164         - arch: arm64
 165           env: CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-rc5 enable-md2 -fsanitize=address" LSAN_OPTIONS="report_objects=1"
 166
 167
 168 before_script:
 169     - env
 170     - if [ "$TRAVIS_PULL_REQUEST" != "false" -a -n "$EXTENDED_TEST" ]; then
 171           (git log -1 $TRAVIS_COMMIT_RANGE | grep '\[extended tests\]' > /dev/null) || travis_terminate 0;
 172       fi
 173     - if [ -n "$DESTDIR" ]; then
 174           sh .travis-create-release.sh $TRAVIS_OS_NAME;
 175           tar -xzf _srcdist.tar.gz;
 176           mkdir _build;
 177           cd _build;
 178           srcdir=../_srcdist;
 179           top=..;
 180       else
 181           srcdir=.;
 182           top=.;
 183       fi
 184     - if [ "$CC" = i686-w64-mingw32-gcc ]; then
 185           export CROSS_COMPILE=${CC%%gcc}; unset CC;
 186           $srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format;
 187       elif [ "$CC" = x86_64-w64-mingw32-gcc ]; then
 188           export CROSS_COMPILE=${CC%%gcc}; unset CC;
 189           $srcdir/Configure mingw64 $CONFIG_OPTS -Wno-pedantic-ms-format;
 190       else
 191           if which ccache >/dev/null && test "$BORINGSSL_TESTS" != yes; then
 192               CC="ccache $CC";
 193           fi;
 194           if [ -n "$CONFIGURE_TARGET" ]; then
 195               $srcdir/Configure $CONFIGURE_TARGET $CONFIG_OPTS;
 196           else
 197               $srcdir/config -v $CONFIG_OPTS;
 198           fi;
 199       fi
 200     - ./configdata.pm --dump
 201     - cd $top
 202
 203 script:
 204     - if [ -z "$BUILDONLY" ]; then
 205           make="make -s";
 206       else
 207           make="make";
 208       fi
 209     - if [ -n "$GENERATE" ]; then
 210           make2="$make PERL=no-perl";
 211       else
 212           make2="$make";
 213       fi
 214     - top=${PWD}
 215     - if [ -n "$DESTDIR" ]; then
 216           cd _build;
 217       fi
 218     - if ! $make update; then
 219           echo -e '\052\052 FAILED -- MAKE UPDATE';
 220           travis_terminate 1;
 221       fi
 222     - if ! git diff --exit-code; then
 223           echo -e '\052\052 FAILED -- UPDATED FILES NOT COMMITTED';
 224           travis_terminate 1;
 225       fi
 226     - if test -n "$GENERATE" && ! $make build_all_generated; then
 227           echo -e '\052\052 FAILED -- MAKE BUILD_ALL_GENERATED';
 228           travis_terminate 1;
 229       fi
 230     - if test -n "$CHECKDOCS" && ! $make doc-nits; then
 231           echo -e '\052\052 FAILED -- MAKE DOC-NITS';
 232           travis_terminate 1;
 233       fi
 234     - if ! $make2; then
 235           echo -e '\052\052 FAILED -- MAKE';
 236           travis_terminate 1;
 237       fi;
 238     - if test -n "$CHECKDOCS" && ! $make cmd-nits; then
 239           echo -e '\052\052 FAILED -- MAKE CMD-NITS';
 240           travis_terminate 1;
 241       fi
 242     - if [ -z "$BUILDONLY" ]; then
 243           if [ -n "$CROSS_COMPILE" ]; then
 244               sudo dpkg --add-architecture i386;
 245               sudo apt-get update;
 246               sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install wine;
 247               export EXE_SHELL="wine" WINEPREFIX=`pwd`;
 248           fi;
 249           if [ -e krb5/src ]; then
 250               sudo apt-get -yq install bison dejagnu gettext keyutils ldap-utils libldap2-dev libkeyutils-dev python-cjson python-paste python-pyrad slapd tcl-dev tcsh;
 251           fi;
 252           if ! HARNESS_VERBOSE_FAILURE=yes BORING_RUNNER_DIR=$top/boringssl/ssl/test/runner make test; then
 253               echo -e '\052\052 FAILED -- MAKE TEST';
 254               travis_terminate 1;
 255           fi;
 256       else
 257           if ! $make build_tests >~/build.log 2>&1; then
 258               echo -e '\052\052 FAILED -- MAKE BUILD_TESTS';
 259               cat ~/build.log
 260               travis_terminate 1;
 261           fi;
 262       fi
 263     - if [ -n "$DESTDIR" ]; then
 264           mkdir "$top/$DESTDIR";
 265           if ! $make install DESTDIR="$top/$DESTDIR" >~/install.log 2>&1 ; then
 266               echo -e '\052\052 FAILED -- MAKE INSTALL';
 267               cat ~/install.log;
 268               travis_terminate 1;
 269           fi;
 270       fi
 271     - cd $top
 272     - echo -e '\052\052 DONE'
 273
 274 after_success:
 275     - if [ -n "$COVERALLS" ]; then
 276           coveralls -b . --gcov gcov --gcov-options '\-lpbc';
 277       fi;
 278
 279 notifications:
 280     email:
 281         secure: "xeGNgWO7aoaDgRvcZubposqMsj36aU8c6F0oHfw+rUqltCQ14IgYCUwzocmR2O+Pa7B3Cx5VjMfBFHbQaajZsfod8vu7g+aGq/zkjwbhsr/SR4dljJjFJXLGZjIalm9KgP6KInmVDuINfCqP+MHIY5lZkNI7DMcyHDhVc5nSKvCXV7xTDNgmstvh8rB/z51WfHDqGqfBtiuK5FDNxmvYK8OFJ5W94Lu9LDlizcxwK3GAj7arOui7Z5w8bQ6p4seUE3IvJL1Zbj0pZHxvNb6Zeb2Pn8QF1qLlN8YmBktD4aiw0ce4wYRiL87uLgcOxZY7SVXtv2XYFIYWapU/FKjCqa6vK93V/H9eZWEIYNMKnN3wXm2beqVdnKek3OeGJ8v0y7MbSfuLfRtBqbTSNYnpU1Zuo4MQAvHvEPuwCAYkYQajOSRplMH5sULFKptuVqNtOMfjL8jHb8AEoL1acYIk43ydxeYrzzas4fqgCDJ52573/u0RNdF1lkQBLkuM365OB8VRqtpnoxcdEIY/qBc/8TzZ24fxyrs5qdHFcxGSgpN2EP6cJMqpvkemnCNSdhxUqfzm22N7a3O8+4LFSBGOnHto/PwdsvF/01yGYL0LoZTnoO1i6x7AMJPBh+eyDU0ZjGhj/msjmqeb9C8vRqQ+1WjHrIS1iqCD0Czib8tUPD4="