Add a CHANGES entry for CVE-2019-1551
[openssl.git] / .travis.yml
1 dist: xenial
2 sudo: required
3
4 osx_image: xcode9.3
5
6 language: c
7 cache: ccache
8 git:
9     submodules: false
10     quiet: true
11
12 before_install:
13     - if [ -n "$COVERALLS" ]; then
14           pip install --user cpp-coveralls;
15       fi;
16     - if expr "$CONFIG_OPTS" ":" ".*enable-external-tests" > /dev/null; then
17           git submodule update --init --recursive;
18       fi;
19
20 os:
21     - linux
22     - osx
23
24 compiler:
25     - clang
26     - gcc
27
28 env:
29     - CONFIG_OPTS="" DESTDIR="_install"
30     - CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-crypto-mdebug enable-rc5 enable-md2"
31     - CONFIG_OPTS="no-asm no-makedepend enable-buildtest-c++ --strict-warnings -D_DEFAULT_SOURCE" BUILDONLY="yes" CHECKDOCS="yes" GENERATE="yes" CPPFLAGS="-ansi"
32
33 matrix:
34     include:
35         - os: linux
36           arch: arm64
37           compiler: gcc
38           env: CONFIG_OPTS="--strict-warnings"
39         - os: linux-ppc64le
40           sudo: false
41           compiler: clang
42           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES"
43         - os: linux
44           compiler: gcc
45           env: CONFIG_OPTS="--strict-warnings" COMMENT="Move to the BORINGTEST build when interoperable"
46         - os: linux
47           dist: trusty
48           compiler: clang
49           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes"
50         - os: linux
51           dist: bionic
52           compiler: clang
53           env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes"
54         - os: linux
55           addons:
56               apt:
57                   packages:
58                       - binutils-mingw-w64
59                       - gcc-mingw-w64
60           compiler: i686-w64-mingw32-gcc
61           env: CONFIG_OPTS="no-stdio" BUILDONLY="yes"
62         # Uncomment if there is reason to believe that PPC-specific problem
63         # can be diagnosed with this possibly >30 mins sanitizer build...
64         #- os: linux-ppc64le
65         #  sudo: false
66         #  compiler: gcc
67         #  env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-ubsan no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES"
68         - os: linux
69           addons:
70               apt:
71                   packages:
72                       - golang-1.10
73           compiler: gcc
74           env:  EXTENDED_TEST="yes" CONFIG_OPTS="--debug --coverage no-asm enable-rc5 enable-md2 enable-ec_nistp_64_gcc_128 enable-ssl3 enable-ssl3-method enable-nextprotoneg enable-weak-ssl-ciphers no-shared enable-buildtest-c++ -DPEDANTIC -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION" COVERALLS="yes" BORINGSSL_TESTS="yes" CXX="g++"
75         - os: linux
76           addons:
77               apt:
78                   packages:
79                       - golang-1.10
80           compiler: gcc
81           env:  EXTENDED_TEST="yes" CONFIG_OPTS="--debug enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-external-tests enable-buildtest-c++" BORINGSSL_TESTS="yes" CXX="g++" TESTS=95
82         - os: linux
83           compiler: clang
84           env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument"
85         - os: linux
86           compiler: clang
87           env:  EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" CXX="clang++"
88         - os: linux
89           compiler: clang
90           env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-rc5 enable-md2 no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument"
91         - os: linux
92           compiler: gcc
93           env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug no-asm enable-ubsan enable-rc5 enable-md2 enable-buildtest-c++ -DPEDANTIC" OPENSSL_TEST_RAND_ORDER=0
94         - os: linux
95           addons:
96               apt:
97                   packages:
98                       - binutils-mingw-w64
99                       - gcc-mingw-w64
100           compiler: i686-w64-mingw32-gcc
101           env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic"
102         - os: linux
103           addons:
104               apt:
105                   packages:
106                       - binutils-mingw-w64
107                       - gcc-mingw-w64
108           compiler: x86_64-w64-mingw32-gcc
109           env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic"
110         - os: linux
111           language: python
112           python: 3.7
113           install: pip install flake8
114           before_script:
115             # stop the build if there are Python syntax errors or undefined names
116             - flake8 . --count --select=E901,E999,F821,F822,F823 --show-source --statistics
117             # exit-zero treats all errors as warnings.  The GitHub editor is 127 chars wide
118             - flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
119           script: true
120     exclude:
121         - os: linux
122           compiler: clang
123         - os: osx
124           compiler: gcc
125
126 before_script:
127     - env
128     - if [ "$TRAVIS_PULL_REQUEST" != "false" -a -n "$EXTENDED_TEST" ]; then
129           (git log -1 $TRAVIS_COMMIT_RANGE | grep '\[extended tests\]' > /dev/null) || exit 0;
130       fi
131     - if [ -n "$DESTDIR" ]; then
132           sh .travis-create-release.sh $TRAVIS_OS_NAME;
133           tar -xzf _srcdist.tar.gz;
134           mkdir _build;
135           cd _build;
136           srcdir=../_srcdist;
137           top=..;
138       else
139           srcdir=.;
140           top=.;
141       fi
142     - if [ "$CC" = i686-w64-mingw32-gcc ]; then
143           export CROSS_COMPILE=${CC%%gcc}; unset CC;
144           $srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format;
145       elif [ "$CC" = x86_64-w64-mingw32-gcc ]; then
146           export CROSS_COMPILE=${CC%%gcc}; unset CC;
147           $srcdir/Configure mingw64 $CONFIG_OPTS -Wno-pedantic-ms-format;
148       else
149           if which ccache >/dev/null && test "$BORINGSSL_TESTS" != yes; then
150               CC="ccache $CC";
151           fi;
152           $srcdir/config -v $CONFIG_OPTS;
153       fi
154     - ./configdata.pm --dump
155     - cd $top
156
157 script:
158     - if [ -z "$BUILDONLY" ]; then
159           make="make -s";
160       else
161           make="make";
162       fi
163     - if [ -n "$GENERATE" ]; then
164           make2="$make PERL=no-perl";
165       else
166           make2="$make";
167       fi
168     - top=${PWD}
169     - if [ -n "$DESTDIR" ]; then
170           cd _build;
171       fi
172     - if ! $make update; then
173           echo -e '\052\052 FAILED -- MAKE UPDATE';
174           travis_terminate 1;
175       fi
176     - if ! git diff --exit-code; then
177           echo -e '\052\052 FAILED -- UPDATED FILES NOT COMMITED';
178           travis_terminate 1;
179       fi
180     - if test -n "$CHECKDOCS" && ! $make doc-nits; then
181           echo -e '\052\052 FAILED -- MAKE DOC-NITS';
182           travis_terminate 1;
183       fi
184     - if test -n "$GENERATE" && ! $make build_all_generated; then
185           echo -e '\052\052 FAILED -- MAKE BUILD_ALL_GENERATED';
186           travis_terminate 1;
187       fi
188     - if ! $make2; then
189           echo -e '\052\052 FAILED -- MAKE';
190           travis_terminate 1;
191       fi;
192     - if [ -z "$BUILDONLY" ]; then
193           if [ -n "$CROSS_COMPILE" ]; then
194               sudo dpkg --add-architecture i386;
195               sudo apt-get update;
196               sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install wine;
197               export EXE_SHELL="wine" WINEPREFIX=`pwd`;
198           fi;
199           if [ -e krb5/src ]; then
200               sudo apt-get -yq install bison dejagnu gettext keyutils ldap-utils libldap2-dev libkeyutils-dev python-cjson python-paste python-pyrad slapd tcl-dev tcsh;
201           fi;
202           if ! HARNESS_VERBOSE_FAILURE=yes BORING_RUNNER_DIR=$top/boringssl/ssl/test/runner make test; then
203               echo -e '\052\052 FAILED -- MAKE TEST';
204               travis_terminate 1;
205           fi;
206       else
207           if ! $make build_tests >~/build.log 2>&1; then
208               echo -e '\052\052 FAILED -- MAKE BUILD_TESTS';
209               cat ~/build.log
210               travis_terminate 1;
211           fi;
212       fi
213     - if [ -n "$DESTDIR" ]; then
214           mkdir "$top/$DESTDIR";
215           if ! $make install DESTDIR="$top/$DESTDIR" >~/install.log 2>&1 ; then
216               echo -e '\052\052 FAILED -- MAKE INSTALL';
217               cat ~/install.log;
218               travis_terminate 1;
219           fi;
220       fi
221     - cd $top
222     - echo -e '\052\052 DONE'
223
224 after_success:
225     - if [ -n "$COVERALLS" ]; then
226           coveralls -b . --gcov gcov --gcov-options '\-lpbc';
227       fi;
228
229 notifications:
230     email:
231         secure: "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"