Back to build
Raw log | Switch to full mode | Login

python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/recipes/recipe_modules/bot_update/resources/bot_update.py --spec-path /b/swarming/w/ir/tmp/t/tmpdD5zU4 --revision_mapping_file /b/swarming/w/ir/tmp/t/tmp8fwfyh.json --git-cache-dir /b/swarming/w/ir/cache/git --cleanup-dir /b/swarming/w/ir/k/recipe_cleanup/bot_update --output_json /b/swarming/w/ir/tmp/t/tmpnDe_iZ.json --revision boringssl@c67076d653f7501136f7b208df4b011a7275e8f5 in dir /b/swarming/w/ir/k: allow_subannotations: False cmd: ['python', '-u', '/b/swarming/w/ir/kitchen-checkout/depot_tools/recipes/recipe_modules/bot_update/resources/bot_update.py', '--spec-path', '/b/swarming/w/ir/tmp/t/tmpdD5zU4', '--revision_mapping_file', '/b/swarming/w/ir/tmp/t/tmp8fwfyh.json', '--git-cache-dir', '/b/swarming/w/ir/cache/git', '--cleanup-dir', '/b/swarming/w/ir/k/recipe_cleanup/bot_update', '--output_json', '/b/swarming/w/ir/tmp/t/tmpnDe_iZ.json', '--revision', 'boringssl@c67076d653f7501136f7b208df4b011a7275e8f5'] env: {} env_prefixes: {} env_suffixes: {'PATH': '/b/swarming/w/ir/kitchen-checkout/depot_tools'} infra_step: True name_tokens: ('bot_update',) ok_ret: frozenset([0, 87, 88]) step_test_data: <lambda>(...) trigger_specs: () full environment: ADB_LIBUSB: 0 BOTO_CONFIG: /b/swarming/w/ir/tmp/gsutil_task/.boto BUILDBUCKET_EXPERIMENTAL: FALSE CHROMIUM_REV: e41aeaed051c8cc401e0bce2a6d57dcc330808e6 CIPD_CACHE_DIR: /b/swarming/cipd_cache/cache CIPD_PROTOCOL: v2 DEBIAN_FRONTEND: noninteractive DEVSHELL_CLIENT_PORT: 43820 DOCKER_CONFIG: /b/swarming/w/ir/tmp/docker_cfg_task DOCKER_HOST_HOSTNAME: build6-b9.labs.chromium.org DOCKER_TMPDIR: /b/swarming/w/ir/tmp/docker_tmp_task GIT_CONFIG_NOSYSTEM: 1 GIT_TERMINAL_PROMPT: 0 HOME: /home/chrome-bot HOSTNAME: build6-b9--device1 INFRA_GIT_WRAPPER_HOME: /b/swarming/w/ir/tmp/git_home_task ISOLATED_CACHE_SIZE: 54287331328 LANG: en_US.UTF-8 LANGUAGE: en_US:en LC_ALL: en_US.UTF-8 LOGDOG_COORDINATOR_HOST: logs.chromium.org LOGDOG_STREAM_PREFIX: buildbucket/cr-buildbucket.appspot.com/8915442215696632656 LOGDOG_STREAM_PROJECT: boringssl LOGDOG_STREAM_SERVER_PATH: unix:/b/swarming/w/ir/tmp/ld.sock LOGNAME: chrome-bot LUCI_CONTEXT: /b/swarming/w/itD4F_Uh/luci_context.589471110 MAC_CHROMIUM_TMPDIR: /b/swarming/w/ir/tmp/t MAIL: /var/mail/chrome-bot NO_GCE_CHECK: False NUM_CONFIGURED_CONTAINERS: 7 PATH: /b/swarming/w/ir/cipd_bin_packages:/b/swarming/w/ir/cipd_bin_packages/bin:/b/swarming/cipd_cache/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/b/swarming/w/ir/kitchen-checkout/depot_tools PWD: /b/swarming/w/ir/k PYTHONIOENCODING: UTF-8 PYTHONUNBUFFERED: 1 SHELL: /bin/bash SHLVL: 3 SWARMING_BOT_ID: build6-b9--device1 SWARMING_HEADLESS: 1 SWARMING_SERVER: https://chromium-swarm.appspot.com SWARMING_TASK_ID: 445fc8ad4b637d11 SWARM_URL: https://chromium-swarm.appspot.com/bot_code TEMP: /b/swarming/w/ir/tmp/t TEMPDIR: /b/swarming/w/ir/tmp/t TMP: /b/swarming/w/ir/tmp/t TMPDIR: /b/swarming/w/ir/tmp/t USER: chrome-bot VPYTHON_VIRTUALENV_ROOT: /b/swarming/w/ir/cache/vpython _: /b/swarming/w/ir/cipd_bin_packages/vpython Debugging info: CURRENT_DIR: '/b/swarming/w/ir/k' DEPOT_TOOLS_DIR: '/b/swarming/w/ir/kitchen-checkout/depot_tools' THIS_DIR: '/b/swarming/w/ir/kitchen-checkout/depot_tools/recipes/recipe_modules/bot_update/resources' Gclient Solutions ================= boringssl (https://boringssl.googlesource.com/boringssl.git) Dependencies file is util/bot/DEPS Managed mode is OFF ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/gclient.py recurse -v git update-index --refresh === In directory: /b/swarming/w/ir/k WARNING: Your metrics.cfg file was invalid or nonexistent. A new one will be created. Can't find .gclient_entries You need to run gclient sync at least once to use 'recurse'. This is because .gclient_entries needs to exist and be up to date. ===Failed in 0.0 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/gclient.py recurse -v git update-index --refresh === WARNING: Failed to update git indices. Revisions: ['boringssl@c67076d653f7501136f7b208df4b011a7275e8f5'] Fetching Git checkout at boringssl@c67076d653f7501136f7b208df4b011a7275e8f5 Using Python version: 2.7.14+chromium14 (df075345c7-dirty:df075345c7, Oct 3 2017, 17:29:00) [GCC 4.8.4] Checking git version... ===Running git version === In directory: /b/swarming/w/ir/k git version 2.21.0.chromium16 / Infra wrapper (infra/tools/git/linux-amd64 @ EWp1PZOjn8W4pXONR9mtwNO0RQzp2N1qKYAikv60t3sC) ===Succeeded in 0.0 mins of git version === Using git version 2.21.0.chromium16 / Infra wrapper (infra/tools/git/linux-amd64 @ EWp1PZOjn8W4pXONR9mtwNO0RQzp2N1qKYAikv60t3sC) ===Running git config --get protocol.version === In directory: /b/swarming/w/ir/k 2 ===Succeeded in 0.0 mins of git config --get protocol.version === Using git protocol version 2 Fetching Git checkout ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py exists --quiet --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git === In directory: /b/swarming/w/ir/k /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl ===Succeeded in 0.0 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py exists --quiet --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git === ===Running git cat-file -e c67076d653f7501136f7b208df4b011a7275e8f5 === In directory: /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl ===Failed in 0.1 mins of git cat-file -e c67076d653f7501136f7b208df4b011a7275e8f5 === ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py populate --ignore_locks -v --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git --reset-fetch-config === In directory: /b/swarming/w/ir/k /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl has 2 .pack files, re-bootstrapping if >50 running "git config --unset-all remote.origin.fetch" in "/b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl" running "git config gc.autodetach 0" in "/b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl" running "git config core.deltaBaseCacheLimit 2g" in "/b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl" running "git config remote.origin.url https://boringssl.googlesource.com/boringssl.git" in "/b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl" running "git config --replace-all remote.origin.fetch +refs/heads/*:refs/heads/* \+refs/heads/\*:.*" in "/b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl" Fetching +refs/heads/*:refs/heads/* running "git fetch -v --progress origin +refs/heads/*:refs/heads/*" in "/b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl" remote: Counting objects: 1 remote: Counting objects: 5232, done remote: Finding sources: 5% (1/17) remote: Finding sources: 11% (2/17) remote: Finding sources: 17% (3/17) remote: Finding sources: 23% (4/17) remote: Finding sources: 29% (5/17) remote: Finding sources: 35% (6/17) remote: Finding sources: 41% (7/17) remote: Finding sources: 47% (8/17) remote: Finding sources: 52% (9/17) remote: Finding sources: 58% (10/17) remote: Finding sources: 64% (11/17) remote: Finding sources: 70% (12/17) remote: Finding sources: 76% (13/17) remote: Finding sources: 82% (14/17) remote: Finding sources: 88% (15/17) remote: Finding sources: 94% (16/17) remote: Finding sources: 100% (17/17) remote: Finding sources: 100% (17/17) remote: Total 17 (delta 1), reused 11 (delta 1) From https://boringssl.googlesource.com/a/boringssl = [up to date] 2214 -> 2214 = [up to date] 2272 -> 2272 = [up to date] 2311 -> 2311 = [up to date] 2357 -> 2357 = [up to date] 2490 -> 2490 = [up to date] 2564 -> 2564 = [up to date] 2623 -> 2623 = [up to date] 2661 -> 2661 = [up to date] 2704 -> 2704 = [up to date] 2883 -> 2883 = [up to date] 2924 -> 2924 = [up to date] 2987 -> 2987 = [up to date] 3029 -> 3029 = [up to date] 3071 -> 3071 = [up to date] 3112 -> 3112 = [up to date] 3202 -> 3202 = [up to date] 3239 -> 3239 = [up to date] 3282 -> 3282 = [up to date] 3359 -> 3359 = [up to date] 3538 -> 3538 = [up to date] chromium-stable -> chromium-stable = [up to date] chromium-stable-with-bazel -> chromium-stable-with-bazel = [up to date] fips-20180730 -> fips-20180730 = [up to date] infra/config -> infra/config e55c64fdd..c67076d65 master -> master = [up to date] master-with-bazel -> master-with-bazel fetch +refs/heads/*:refs/heads/* took 0.3 minutes ===Succeeded in 0.3 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py populate --ignore_locks -v --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git --reset-fetch-config === ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py exists --quiet --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git === In directory: /b/swarming/w/ir/k /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl ===Succeeded in 0.0 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py exists --quiet --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git === ===Running git cat-file -e c67076d653f7501136f7b208df4b011a7275e8f5 === In directory: /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl ===Succeeded in 0.0 mins of git cat-file -e c67076d653f7501136f7b208df4b011a7275e8f5 === ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py exists --quiet --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git === In directory: /b/swarming/w/ir/k /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl ===Succeeded in 0.0 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/git_cache.py exists --quiet --cache-dir /b/swarming/w/ir/cache/git https://boringssl.googlesource.com/boringssl.git === ===Running git clone --no-checkout --local --shared /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl /b/swarming/w/ir/k/boringssl === In directory: /b/swarming/w/ir/k Cloning into '/b/swarming/w/ir/k/boringssl'... done. ===Succeeded in 0.0 mins of git clone --no-checkout --local --shared /b/swarming/w/ir/cache/git/boringssl.googlesource.com-boringssl /b/swarming/w/ir/k/boringssl === ===Running git config gc.auto 0 === In directory: /b/swarming/w/ir/k/boringssl ===Succeeded in 0.0 mins of git config gc.auto 0 === ===Running git config gc.autodetach 0 === In directory: /b/swarming/w/ir/k/boringssl ===Succeeded in 0.0 mins of git config gc.autodetach 0 === ===Running git config gc.autopacklimit 0 === In directory: /b/swarming/w/ir/k/boringssl ===Succeeded in 0.0 mins of git config gc.autopacklimit 0 === ===Running git remote set-url --push origin https://boringssl.googlesource.com/boringssl.git === In directory: /b/swarming/w/ir/k/boringssl ===Succeeded in 0.0 mins of git remote set-url --push origin https://boringssl.googlesource.com/boringssl.git === ===Running git checkout --force c67076d653f7501136f7b208df4b011a7275e8f5 -- === In directory: /b/swarming/w/ir/k/boringssl Note: checking out 'c67076d653f7501136f7b208df4b011a7275e8f5'. You are in 'detached HEAD' state. You can look around, make experimental changes and commit them, and you can discard any commits you make in this state without impacting any branches by performing another checkout. If you want to create a new branch to retain commits you create, you may do so (now or later) by using -b with the checkout command again. Example: git checkout -b <new-branch-name> HEAD is now at c67076d65 Require certificates under name constraints use SANs. ===Succeeded in 0.1 mins of git checkout --force c67076d653f7501136f7b208df4b011a7275e8f5 -- === ===Running git clean -dff === In directory: /b/swarming/w/ir/k/boringssl ===Succeeded in 0.0 mins of git clean -dff === ===Running git log --format=%H --max-count=1 === In directory: /b/swarming/w/ir/k/boringssl c67076d653f7501136f7b208df4b011a7275e8f5 ===Succeeded in 0.0 mins of git log --format=%H --max-count=1 === ===Running git config --global user.name === In directory: /b/swarming/w/ir/k boringssl-ci-builder ===Succeeded in 0.0 mins of git config --global user.name === ===Running git config --global user.email === In directory: /b/swarming/w/ir/k boringssl-ci-builder@chops-service-accounts.iam.gserviceaccount.com ===Succeeded in 0.0 mins of git config --global user.email === ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/gclient.py sync --verbose --reset --force --ignore_locks --output-json /b/swarming/w/ir/tmp/t/tmp10bOCU.json --nohooks --noprehooks --delete_unversioned_trees --revision boringssl@unmanaged === In directory: /b/swarming/w/ir/k Looking for .gclient starting from /b/swarming/w/ir/k Loaded .gclient config in /b/swarming/w/ir/k: solutions = [ { 'deps_file': 'util/bot/DEPS', 'managed': False, 'name': 'boringssl', 'url': 'https://boringssl.googlesource.com/boringssl.git'}] cache_dir = r"/b/swarming/w/ir/cache/git" target_os=['android'] target_os_only=False gclient(756) ParseDepsFile:Found recursedeps "{'boringssl/util/bot/android_tools': 'util/bot/DEPS'}". boringssl (Elapsed: 0:00:00) ---------------------------------------- [0:00:00] Started. _____ boringssl at refs/remotes/origin/master [0:00:00] ________ unmanaged solution; skipping boringssl [0:00:00] Finished. ---------------------------------------- boringssl/util/bot/libFuzzer (Elapsed: 0:00:00) ---------------------------------------- [0:00:00] Started. _____ boringssl/util/bot/libFuzzer at e847d8a9b47158695593d5693b0f69250472b229 [0:00:00] running "git cat-file -e e847d8a9b47158695593d5693b0f69250472b229^{commit}" in "/b/swarming/w/ir/cache/git/chromium.googlesource.com-chromium-llvm--project-compiler--rt-lib-fuzzer" skipping mirror update, it has rev=e847d8a9b47158695593d5693b0f69250472b229 already ________ running 'git -c core.deltaBaseCacheLimit=2g clone --no-checkout --progress --shared --verbose /b/swarming/w/ir/cache/git/chromium.googlesource.com-chromium-llvm--project-compiler--rt-lib-fuzzer /b/swarming/w/ir/k/boringssl/util/bot/_gclient_libFuzzer_srxhZW' in '/b/swarming/w/ir/k' [0:00:00] Cloning into '/b/swarming/w/ir/k/boringssl/util/bot/_gclient_libFuzzer_srxhZW'... [0:00:00] done. ________ running 'git -c core.deltaBaseCacheLimit=2g fetch origin --prune --verbose' in '/b/swarming/w/ir/k/boringssl/util/bot/libFuzzer' [0:00:00] From /b/swarming/w/ir/cache/git/chromium.googlesource.com-chromium-llvm--project-compiler--rt-lib-fuzzer [0:00:00] = [up to date] master -> origin/master [0:00:00] Checked out e847d8a9b47158695593d5693b0f69250472b229 to a detached HEAD. Before making any commits in this repo, you should use 'git checkout <branch>' to switch to an existing branch or use 'git checkout origin -b <branch>' to create a new branch for your work. [0:00:00] Finished. ---------------------------------------- boringssl/util/bot/gyp (Elapsed: 0:00:01) ---------------------------------------- [0:00:00] Started. _____ boringssl/util/bot/gyp at d61a9397e668fa9843c4aa7da9e79460fe590bfb [0:00:00] running "git cat-file -e d61a9397e668fa9843c4aa7da9e79460fe590bfb^{commit}" in "/b/swarming/w/ir/cache/git/chromium.googlesource.com-external-gyp" skipping mirror update, it has rev=d61a9397e668fa9843c4aa7da9e79460fe590bfb already ________ running 'git -c core.deltaBaseCacheLimit=2g clone --no-checkout --progress --shared --verbose /b/swarming/w/ir/cache/git/chromium.googlesource.com-external-gyp /b/swarming/w/ir/k/boringssl/util/bot/_gclient_gyp_C12rb7' in '/b/swarming/w/ir/k' [0:00:00] Cloning into '/b/swarming/w/ir/k/boringssl/util/bot/_gclient_gyp_C12rb7'... [0:00:00] done. ________ running 'git -c core.deltaBaseCacheLimit=2g fetch origin --prune --verbose' in '/b/swarming/w/ir/k/boringssl/util/bot/gyp' [0:00:00] From /b/swarming/w/ir/cache/git/chromium.googlesource.com-external-gyp [0:00:00] = [up to date] master -> origin/master [0:00:00] = [up to date] infra/config -> origin/infra/config [0:00:00] = [up to date] md-pages -> origin/md-pages [0:00:01] Checked out d61a9397e668fa9843c4aa7da9e79460fe590bfb to a detached HEAD. Before making any commits in this repo, you should use 'git checkout <branch>' to switch to an existing branch or use 'git checkout origin -b <branch>' to create a new branch for your work. [0:00:01] Finished. ---------------------------------------- [0:01:01] Still working on: [0:01:01] boringssl/util/bot/android_ndk [0:01:01] boringssl/util/bot/android_tools [0:01:11] Still working on: [0:01:11] boringssl/util/bot/android_ndk [0:01:11] boringssl/util/bot/android_tools [0:01:21] Still working on: [0:01:21] boringssl/util/bot/android_ndk [0:01:21] boringssl/util/bot/android_tools [0:01:31] Still working on: [0:01:31] boringssl/util/bot/android_ndk [0:01:31] boringssl/util/bot/android_tools [0:01:41] Still working on: [0:01:41] boringssl/util/bot/android_ndk [0:01:41] boringssl/util/bot/android_tools [0:01:51] Still working on: [0:01:51] boringssl/util/bot/android_ndk [0:01:51] boringssl/util/bot/android_tools [0:02:01] Still working on: [0:02:01] boringssl/util/bot/android_ndk [0:02:01] boringssl/util/bot/android_tools [0:02:11] Still working on: [0:02:11] boringssl/util/bot/android_ndk [0:02:11] boringssl/util/bot/android_tools [0:02:21] Still working on: [0:02:21] boringssl/util/bot/android_ndk [0:02:21] boringssl/util/bot/android_tools [0:02:31] Still working on: [0:02:31] boringssl/util/bot/android_ndk [0:02:31] boringssl/util/bot/android_tools [0:02:41] Still working on: [0:02:41] boringssl/util/bot/android_ndk [0:02:41] boringssl/util/bot/android_tools [0:02:51] Still working on: [0:02:51] boringssl/util/bot/android_ndk [0:02:51] boringssl/util/bot/android_tools [0:03:01] Still working on: [0:03:01] boringssl/util/bot/android_ndk [0:03:01] boringssl/util/bot/android_tools [0:03:11] Still working on: [0:03:11] boringssl/util/bot/android_ndk [0:03:11] boringssl/util/bot/android_tools [0:03:21] Still working on: [0:03:21] boringssl/util/bot/android_ndk [0:03:21] boringssl/util/bot/android_tools [0:03:31] Still working on: [0:03:31] boringssl/util/bot/android_ndk [0:03:31] boringssl/util/bot/android_tools [0:03:41] Still working on: [0:03:41] boringssl/util/bot/android_ndk [0:03:41] boringssl/util/bot/android_tools [0:03:51] Still working on: [0:03:51] boringssl/util/bot/android_ndk [0:03:51] boringssl/util/bot/android_tools [0:04:01] Still working on: [0:04:01] boringssl/util/bot/android_ndk [0:04:01] boringssl/util/bot/android_tools [0:04:11] Still working on: [0:04:11] boringssl/util/bot/android_ndk [0:04:11] boringssl/util/bot/android_tools [0:04:21] Still working on: [0:04:21] boringssl/util/bot/android_ndk [0:04:21] boringssl/util/bot/android_tools [0:04:31] Still working on: [0:04:31] boringssl/util/bot/android_ndk [0:04:31] boringssl/util/bot/android_tools [0:04:41] Still working on: [0:04:41] boringssl/util/bot/android_ndk [0:04:41] boringssl/util/bot/android_tools [0:04:51] Still working on: [0:04:51] boringssl/util/bot/android_ndk [0:04:51] boringssl/util/bot/android_tools [0:05:01] Still working on: [0:05:01] boringssl/util/bot/android_ndk [0:05:01] boringssl/util/bot/android_tools [0:05:04] Still working on: [0:05:04] boringssl/util/bot/android_ndk [0:05:04] boringssl/util/bot/android_tools boringssl/util/bot/android_ndk (Elapsed: 0:05:04) ---------------------------------------- [0:00:00] Started. _____ boringssl/util/bot/android_ndk at 4e2cea441bfd43f0863d14f57b1e1844260b9884 [0:00:00] running "git cat-file -e 4e2cea441bfd43f0863d14f57b1e1844260b9884^{commit}" in "/b/swarming/w/ir/cache/git/chromium.googlesource.com-android_ndk" skipping mirror update, it has rev=4e2cea441bfd43f0863d14f57b1e1844260b9884 already ________ running 'git -c core.deltaBaseCacheLimit=2g clone --no-checkout --progress --shared --verbose /b/swarming/w/ir/cache/git/chromium.googlesource.com-android_ndk /b/swarming/w/ir/k/boringssl/util/bot/_gclient_android_ndk_ZWuRKR' in '/b/swarming/w/ir/k' [0:00:00] Cloning into '/b/swarming/w/ir/k/boringssl/util/bot/_gclient_android_ndk_ZWuRKR'... [0:00:00] done. ________ running 'git -c core.deltaBaseCacheLimit=2g fetch origin --prune --verbose' in '/b/swarming/w/ir/k/boringssl/util/bot/android_ndk' [0:00:00] From /b/swarming/w/ir/cache/git/chromium.googlesource.com-android_ndk [0:00:00] = [up to date] master -> origin/master [0:00:00] = [up to date] agrieve-inline-tweaks -> origin/agrieve-inline-tweaks [0:00:00] = [up to date] agrieve-inline-tweaks-string -> origin/agrieve-inline-tweaks-string [0:00:00] = [up to date] next -> origin/next [0:00:00] = [up to date] r16 -> origin/r16 [0:00:00] = [up to date] unmodified -> origin/unmodified [0:05:04] Checked out 4e2cea441bfd43f0863d14f57b1e1844260b9884 to a detached HEAD. Before making any commits in this repo, you should use 'git checkout <branch>' to switch to an existing branch or use 'git checkout origin -b <branch>' to create a new branch for your work. [0:05:04] Finished. ---------------------------------------- gclient(602) _postprocess_deps:use_relative_paths enabled. gclient(608) _postprocess_deps:Updating deps by prepending boringssl/util/bot/android_tools. boringssl/util/bot/android_tools (Elapsed: 0:05:32) ---------------------------------------- [0:00:00] Started. _____ boringssl/util/bot/android_tools at 347a7c8078a009e98995985b7ab6ec6b35696dea [0:00:00] running "git cat-file -e 347a7c8078a009e98995985b7ab6ec6b35696dea^{commit}" in "/b/swarming/w/ir/cache/git/chromium.googlesource.com-android_tools" skipping mirror update, it has rev=347a7c8078a009e98995985b7ab6ec6b35696dea already ________ running 'git -c core.deltaBaseCacheLimit=2g clone --no-checkout --progress --shared --verbose /b/swarming/w/ir/cache/git/chromium.googlesource.com-android_tools /b/swarming/w/ir/k/boringssl/util/bot/_gclient_android_tools_FkMhTr' in '/b/swarming/w/ir/k' [0:00:00] Cloning into '/b/swarming/w/ir/k/boringssl/util/bot/_gclient_android_tools_FkMhTr'... [0:00:01] done. ________ running 'git -c core.deltaBaseCacheLimit=2g fetch origin --prune --verbose' in '/b/swarming/w/ir/k/boringssl/util/bot/android_tools' [0:00:01] From /b/swarming/w/ir/cache/git/chromium.googlesource.com-android_tools [0:00:01] = [up to date] master -> origin/master [0:00:01] = [up to date] 2403 -> origin/2403 [0:00:01] = [up to date] agrieve-roll-inline-tweaks -> origin/agrieve-roll-inline-tweaks [0:00:01] = [up to date] agrieve-roll-inline-tweaks2 -> origin/agrieve-roll-inline-tweaks2 [0:00:01] = [up to date] agrieve-roll-string-inline -> origin/agrieve-roll-string-inline [0:05:32] Checked out 347a7c8078a009e98995985b7ab6ec6b35696dea to a detached HEAD. Before making any commits in this repo, you should use 'git checkout <branch>' to switch to an existing branch or use 'git checkout origin -b <branch>' to create a new branch for your work. [0:05:33] Finished. ---------------------------------------- [0:06:33] Still working on: [0:06:33] boringssl/util/bot/android_tools/ndk [0:06:43] Still working on: [0:06:43] boringssl/util/bot/android_tools/ndk [0:06:53] Still working on: [0:06:53] boringssl/util/bot/android_tools/ndk [0:07:03] Still working on: [0:07:03] boringssl/util/bot/android_tools/ndk [0:07:13] Still working on: [0:07:13] boringssl/util/bot/android_tools/ndk [0:07:23] Still working on: [0:07:23] boringssl/util/bot/android_tools/ndk [0:07:32] Still working on: [0:07:32] boringssl/util/bot/android_tools/ndk boringssl/util/bot/android_tools/ndk (Elapsed: 0:01:59) ---------------------------------------- [0:05:33] Started. _____ boringssl/util/bot/android_tools/ndk at e951c37287c7d8cd915bf8d4149fd4a06d808b55 [0:05:33] running "git cat-file -e e951c37287c7d8cd915bf8d4149fd4a06d808b55^{commit}" in "/b/swarming/w/ir/cache/git/chromium.googlesource.com-android_ndk" skipping mirror update, it has rev=e951c37287c7d8cd915bf8d4149fd4a06d808b55 already ________ running 'git -c core.deltaBaseCacheLimit=2g clone --no-checkout --progress --shared --verbose /b/swarming/w/ir/cache/git/chromium.googlesource.com-android_ndk /b/swarming/w/ir/k/boringssl/util/bot/android_tools/_gclient_ndk_tVTN2U' in '/b/swarming/w/ir/k' [0:05:36] Cloning into '/b/swarming/w/ir/k/boringssl/util/bot/android_tools/_gclient_ndk_tVTN2U'... [0:05:37] done. ________ running 'git -c core.deltaBaseCacheLimit=2g fetch origin --prune --verbose' in '/b/swarming/w/ir/k/boringssl/util/bot/android_tools/ndk' [0:05:37] From /b/swarming/w/ir/cache/git/chromium.googlesource.com-android_ndk [0:05:37] = [up to date] master -> origin/master [0:05:37] = [up to date] agrieve-inline-tweaks -> origin/agrieve-inline-tweaks [0:05:37] = [up to date] agrieve-inline-tweaks-string -> origin/agrieve-inline-tweaks-string [0:05:37] = [up to date] next -> origin/next [0:05:37] = [up to date] r16 -> origin/r16 [0:05:37] = [up to date] unmodified -> origin/unmodified [0:07:32] Checked out e951c37287c7d8cd915bf8d4149fd4a06d808b55 to a detached HEAD. Before making any commits in this repo, you should use 'git checkout <branch>' to switch to an existing branch or use 'git checkout origin -b <branch>' to create a new branch for your work. [0:07:32] Finished. ---------------------------------------- ===Succeeded in 7.5 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/gclient.py sync --verbose --reset --force --ignore_locks --output-json /b/swarming/w/ir/tmp/t/tmp10bOCU.json --nohooks --noprehooks --delete_unversioned_trees --revision boringssl@unmanaged === ===Running git ls-files .DEPS.git === In directory: boringssl ===Succeeded in 0.0 mins of git ls-files .DEPS.git === ===Running git rev-parse HEAD === In directory: boringssl/ c67076d653f7501136f7b208df4b011a7275e8f5 ===Succeeded in 0.0 mins of git rev-parse HEAD === ===Running git log --format=%B -n1 HEAD === In directory: boringssl/ Require certificates under name constraints use SANs. The common name fallback does not interact well with name constraints. Until we remove this fallback, we must resolve this conflict. Blindly applying name constraints to the common name will reject "decorative" common names that aren't intended to be hostnames (e.g. [0]). We need to guess based on format whether the common name is a DNS name. It is important this same check is applied to *both* name constraints and name matching, which means the OpenSSL version (see 5bd5dcd49605ca2aa7931599894302a3ac4b0b04, d02d80b2e80adfdde49f76cf7c7af4e013f45005, and 55a6250f1e7336e8a7d89fb609eb23398715ff6f) is unsuitable as a compatibility data point. In theory we could limit this to chains with name constraints, which are uncommon, but X509_check_host sees only the leaf. We must apply it uniformly. That means a strict check risks problems with malformed non-WebPKI setups like [1]. For a first pass, mirror Go's behavior. Like Go, rather than run SAN-less DNS-like common names through name constraints, we simply reject all such certificates. Name constraints now exclude all leaf certificates that can trigger the common name fallback. They are rare enough that we can hopefully hold them to a higher standard. Note this does not make misclassified decorative common names any worse, compared to the checking the name constraint. Such names would not have matched the constraint anyway. Update-Note: This can may cause two kinds of errors: 1. Leaf certificates whose chain contains a name constraint and lack SANs may be rejected with X509_V_ERR_NAME_CONSTRAINTS_WITHOUT_SANS. 2. Leaf certificates which use the common name fallback and verify against an insufficiently DNS-looking hostname may fail with X509_V_ERR_HOSTNAME_MISMATCH. In both cases, the fix is to include the subjectAltName in the certificate, rather than rely on the common name fallback. (Refining the heuristic is also an option, but the two failure modes pull it in opposite directions, so this is tricky.) [0] https://github.com/golang/go/issues/24151 [1] https://github.com/GoogleCloudPlatform/cloudsql-proxy/issues/194 Change-Id: If25557de428768292a14ba3bdeeffbd74e3a3bf8 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/35665 Reviewed-by: Adam Langley <agl@google.com> ===Succeeded in 0.0 mins of git log --format=%B -n1 HEAD === ===Running /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/gclient.py revinfo -a === In directory: /b/swarming/w/ir/k boringssl: https://boringssl.googlesource.com/boringssl.git@c67076d653f7501136f7b208df4b011a7275e8f5 boringssl/util/bot/android_ndk: https://chromium.googlesource.com/android_ndk.git@4e2cea441bfd43f0863d14f57b1e1844260b9884 boringssl/util/bot/android_tools: https://chromium.googlesource.com/android_tools.git@347a7c8078a009e98995985b7ab6ec6b35696dea boringssl/util/bot/android_tools/ndk: https://chromium.googlesource.com/android_ndk.git@e951c37287c7d8cd915bf8d4149fd4a06d808b55 boringssl/util/bot/gyp: https://chromium.googlesource.com/external/gyp.git@d61a9397e668fa9843c4aa7da9e79460fe590bfb boringssl/util/bot/libFuzzer: https://chromium.googlesource.com/chromium/llvm-project/compiler-rt/lib/fuzzer.git@e847d8a9b47158695593d5693b0f69250472b229 ===Succeeded in 0.0 mins of /b/swarming/w/ir/cipd_bin_packages/bin/python -u /b/swarming/w/ir/kitchen-checkout/depot_tools/gclient.py revinfo -a ===