[Pkg-openssl-devel] Bug#793565: Bug#793565: libssl1.0.0: HMAC broken after upgrade to 1.0.2d-1

[Kurt Roeckx]

On Thu, Jul 30, 2015 at 09:27:10PM +0200, Marc Lehmann wrote:
> On Thu, Jul 30, 2015 at 08:58:21PM +0200, Kurt Roeckx <kurt at roeckx.be> wrote:
> > Yes, I was talking about -fsanitize=address.  I suggest you make a
> > static version of libcrypto/libssl and link that in gvpe.  I
> > suggest you build both openssl and gvpe with that option.
> 
> I guess correctly then - I built a gvpe binary with it and it works for a
> while now. I will have to look into building openssl this way - any tips
> on how to most easily achieve that with the debian openssl package?

It should pick them up from dpkg-buildflags.

So setting DEB_CFLAGS_APPEND="-fsanitize=address" in the
environment should do it.


Kurt