Re: git broken for AIX somewhere between 2.13.2 and 2.13.3

On 29/07/2018 21:27, brian m. carlson wrote:

On Sun, Jul 29, 2018 at 08:59:39PM +0200, Michael wrote:

quoted

On 29/07/2018 20:10, brian m. carlson wrote:

quoted

Are you using SHA1DC on that system, and does compiling with another
SHA-1 implementation help?  There was a change to the SHA1DC code big
endian detection in that commit, which might be the cause of your
problems if you're using a POWER or PowerPC system.

I was thinking it might be an 'endian' issue. So, yes - AIX runs on POWER,
only as BigEndian.

Well, that explains it.  I would recommend submitting a patch to
https://github.com/cr-marcstevens/sha1collisiondetection, and the we can
pull in the updated submodule with that fix.

Not sure I am smart enough to do that. I'll have to download, build, and 
see what it says.

In the mean time, you could build using OpenSSL or the block SHA-1
implementation, and switch back once things are in a good state.  I do
recommend using SHA1DC for things long term, though, as attacks on SHA-1
are only going to get better.

Any suggestions on where/how to do this?

root@x066:[/data/prj/aixtools/git/git-2.13.2]./configure --help | grep 
-i sha
   --sharedstatedir=DIR    modifiable architecture-independent data 
[PREFIX/com]
   --datarootdir=DIR       read-only arch.-independent data root 
[PREFIX/share]

root@x066:[/data/prj/aixtools/git/git-2.13.2]./configure --help | grep ssl
   --with-openssl          use OpenSSL library (default is YES)
                           ARG can be prefix for openssl library and 
headers