[tor-bugs] #31844 [Applications/Tor Browser]: OpenSSL 1.1.1d fails to compile for some platforms/architectures

[Tor Bug Tracker & Wiki]

#31844: OpenSSL 1.1.1d fails to compile for some platforms/architectures
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-rbm, TorBrowserTeam201909R,      |  Actual Points:
  tbb-9.0-must-alpha                             |
Parent ID:                                       |         Points:  0.5
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by boklm):

 * status:  new => needs_review
 * keywords:  tbb-rbm, TorBrowserTeam201909, tbb-9.0-must-alpha => tbb-rbm,
     TorBrowserTeam201909R, tbb-9.0-must-alpha


Comment:

 There are two patches for review in branch `bug_31844_v3`:
 https://gitweb.torproject.org/user/boklm/tor-browser-
 build.git/commit/?h=bug_31844_v3&id=7bab743e199ea3d3ba8ca3f5ba5289609035f37c

 One is to stop using `--prefix`, so that openssl does not look for config
 file in a user-writable directory (which is `CVE-2019-1552`, although I am
 not sure if Tor is using openssl in a way where this matters).

 The other is for fixing the use of unquoted paths. I should also submit
 this patch to https://github.com/openssl/openssl/issues/9520.

 However, the linux64 build is not yet fixed.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31844#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online