Roll BoringSSL from 5a2194f43d88 to d3f26f8af085 (48 revisions)

https://boringssl.googlesource.com/boringssl.git/+log/5a2194f43d88..d3f26f8af085

2025-01-20 bbe@google.com Add a function for Conscrypt to use
2025-01-17 davidben@google.com Fix unwrap comment for CBB_init_fixed
2025-01-17 davidben@google.com Document and test PEM_X509_INFO_read_bio's odd decryption behavior
2025-01-16 davidben@google.com Test some obscure modes of EVP sign/verify with RSA keys
2025-01-16 davidben@google.com Remove some dead code in bssl_shim
2025-01-16 davidben@google.com clang-format bssl_shim.cc
2025-01-16 davidben@google.com Rename foo_extra to foo
2025-01-16 ebiggers@google.com Add explicit prefetching to the new AES-GCM code
2025-01-16 agl@chromium.org Add SPAKE2+.
2025-01-15 joegar@google.com Add ability to upload a directory of vector test results.
2025-01-14 davidben@google.com Bump MODULE.bazel for another snapshot
2025-01-14 davidben@google.com Unfork Chromium's Clang update script
2025-01-14 davidben@google.com Remove embed_test_data.go
2025-01-14 agl@chromium.org Mark fallible container operations as `nodiscard`
2025-01-13 davidben@google.com Start using bssl::UniquePtr in libcrypto
2025-01-13 davidben@google.com Move RSA_blinding_on out of BCM
2025-01-13 davidben@google.com Switch some tests to std::string_view
2025-01-13 davidben@google.com Initialize iqmp during keygen directly
2025-01-13 davidben@google.com Remove a redundant call to freeze_private_key
2025-01-13 bbe@google.com Add tests for TIME functions that accept offsets
2025-01-13 davidben@google.com Use more span patterns for strings vs bytes
2025-01-13 davidben@google.com Remove calls to now unnecessary MakeSpan/MakeConstSpan
2025-01-13 davidben@google.com Remove now unused size hooks from ECDSA_METHOD and RSA_METHOD
2025-01-13 davidben@google.com Remove some RSA_is_opaque and EC_KEY_is_opaque special cases
2025-01-12 davidben@google.com Use std::string_view for label strings
2025-01-09 davidben@google.com Update CMAKE_CXX_STANDARD in generate_build_files.py
2025-01-09 davidben@google.com Revert "Stop playing with time strings with strlcat"
2025-01-08 daniel@binaryparadox.net util/fipstools: document AES-gcm-randnonce cmds
2025-01-08 daniel@binaryparadox.net util/fipstools: add SSH KDF ACVP support
2025-01-08 davidben@google.com Add something to the error queue when Proc-Type version is wrong
2025-01-08 agl@chromium.org Gate Rust support for ML-{KEM,DSA} on a crate feature.
2025-01-07 bbe@google.com Stop playing with time strings with strlcat
2025-01-07 agl@chromium.org Revert "Always try and enable the new_uninit feature."
2025-01-07 bbe@google.com replace some more allocate + strlcat with asprintf
2025-01-07 davidben@google.com Remove out directories in pki test data
2025-01-07 bbe@google.com replace manual alloction math and srlcats with asprintf
2025-01-07 bbe@google.com use asprintf instead of magic manual allocation
2025-01-07 prb@google.com Always try and enable the new_uninit feature.
2025-01-07 davidben@google.com Add another missing file header
2025-01-07 davidben@google.com Add some missing file headers
2025-01-07 davidben@google.com Align a few license headers with OpenSSL's "copyright consolidation"
2025-01-06 agl@chromium.org Remove uses of `strcpy`, `strcat`, and `sprintf`, and handle NULL in some functions.
2025-01-06 davidben@google.com Import "Remove some code for a contributor that we cannot find" from upstream OpenSSL
2025-01-06 davidben@google.com Import "Undo commit d420ac2" from upstream OpenSSL
2025-01-06 ebiggers@google.com Disable the "AVX10/256" AES-GCM functions for now
2025-01-06 ebiggers@google.com Add VAES + AVX2 optimized AES-GCM
2025-01-06 daniel@binaryparadox.net util/fipstools: adjust KDF-counter command docs
2025-01-06 daniel@binaryparadox.net util/fipstools: support more digests w/ hmacDRBG

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/boringssl-dart-sdk
Please CC dart-engprod@google.com,dart-vm-gardener@grotations.appspotmail.com,dart-vm-team@google.com on the revert to ensure that a human
is aware of the problem.

To file a bug in BoringSSL: https://crbug.com/boringssl/new
To file a bug in Dart SDK: https://github.com/dart-lang/sdk/issues

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

Tbr: dart-vm-gardener@grotations.appspotmail.com
Change-Id: I9947da0bc5b08179052b9c8eef2e7520195d6213
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/405161
Reviewed-by: Alexander Aprelev <aam@google.com>
Reviewed-by: Alexander Thomas <athom@google.com>
Commit-Queue: Alexander Aprelev <aam@google.com>

https://dart.googlesource.com/sdk/+/8a1010f43928d49a3fff37a59efad2ba4501684e
2 files changed
tree: 29f61aa0620ba38649e3d728624d2e2516382855
  1. ci/
  2. tools/
  3. .gitignore
  4. commits.json
  5. DEPS
  6. OWNERS
  7. README.md
README.md

Monorepo

A gclient solution for checking out Dart and Flutter source trees

Monorepo is:

  • Optimized for Tip-of-Tree testing: The Monorepo DEPS used to check out Dart and Flutter dependencies comes from the Flutter engine DEPS with updated dependencies from Dart.

Checking out Monorepo

With depot_tools installed and on your path, create a directory for your monorepo checkout and run these commands to create a gclient solution in that directory:

mkdir monorepo
cd monorepo
gclient config --unmanaged https://dart.googlesource.com/monorepo
gclient sync -D

This gives you a checkout in the monorepo directory that contains:

monorepo/
  DEPS - the DEPS used for this gclient checkout
  commits.json - the pinned commits for Dart, flutter/engine,
                 and flutter/flutter
  tools/ - scripts used to create monorepo DEPS
engine/src/ - the flutter/buildroot repo
    flutter/ - the flutter/engine repo
    out/ - the build directory, where Flutter engine builds are created
    third_party/ - Flutter dependencies checked out by DEPS
      dart/ - the Dart SDK checkout.
        third_party - Dart dependencies, also used by Flutter
flutter/ - the flutter/flutter repo

Building Flutter engine

Flutter's instructions for building the engine are at Compiling the engine

They can be followed closely, with a few changes:

  • Googlers working on Dart do not need to switch to Fuchsia's Goma RBE, except for Windows. The GOMA_DIR enviroment variable can just point to the .cipd_bin directory in a depot_tools installation, and just goma_ctl ensure_start is sufficient.
  • The --no-prebuilt-dart-sdk option has to be added to every gn command, so that the build is set up to build and use a local Dart SDK.
  • The --full-dart-sdk option must be added to gn for the host build target if you will be building web or desktop apps.

Example build commands that work on linux:

MONOREPO_PATH=$PWD
if [[ ! $PATH =~ (^|:)$MONOREPO_PATH/flutter/bin(:|$) ]]; then
  PATH=$MONOREPO_PATH/flutter/bin:$PATH
fi

export GOMA_DIR=$(dirname $(command -v gclient))/.cipd_bin
goma_ctl ensure_start

pushd engine/src
flutter/tools/gn --goma --no-prebuilt-dart-sdk --unoptimized --full-dart-sdk
autoninja -C out/host_debug_unopt
popd

Building Flutter apps

The Flutter commands used to build and run apps will use the locally built Flutter engine and Dart SDK, instead of the one downloaded by the Flutter tool, if the --local-engine option is provided.

For example, to build and run the Flutter spinning square sample on the web platform,

MONOREPO_PATH=$PWD
cd flutter/examples/layers
flutter --local-engine=host_debug_unopt \
  -d chrome run widgets/spinning_square.dart
cd $MONOREPO_PATH

To build for desktop, specify the desktop platform device in flutter run as -d macos or -d linux or -d windows. You may also need to run the command

flutter create --platforms=windows,macos,linux

on existing apps, such as sample apps. New apps created with flutter create already include these support files. Details of desktop support are at Desktop Support for Flutter

Testing

Tests in the Flutter source tree can be run with the flutter test command, run in the directory of a package containing tests. For example:

MONOREPO_PATH=$PWD
cd flutter/packages/flutter
flutter test --local-engine=host_debug_unopt
cd $MONOREPO_PATH

Troubleshooting

Please file an issue or email the dart-engprod team with any problems with or questions about using monorepo.

We will update this documentation to address them.

  • flutter commands may download the engine and Dart SDK files for the configured channel, even though they will be using the local engine and its SDK.

Windows

  • On Windows, gclient sync needs to be run in an administrator session, because some installed dependencies create symlinks.