Merge pull request #306 from nasa/292-tm_process-aos_process-oob-read… #686
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CryptoLib | |
| on: | |
| push: | |
| branches: [ main, dev ] | |
| pull_request: | |
| branches: [ main, dev ] | |
| jobs: | |
| # | |
| # Minimal Build | |
| # | |
| minimal_build: | |
| # Container Setup | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Update | |
| run: sudo apt-get update | |
| - name: Install Dependencies | |
| run: sudo apt-get install -y lcov libcurl4-openssl-dev libmariadb-dev libmariadb-dev-compat python3 | |
| - name: Install Python Libraries | |
| run: sudo pip install pycryptodome | |
| - name: Install Libgcrypt | |
| run: > | |
| curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 | |
| -o /tmp/libgpg-error-1.50.tar.bz2 | |
| && tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgpg-error-1.50 | |
| && sudo ./configure | |
| && sudo make install | |
| && curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 | |
| -o /tmp/libgcrypt-1.11.0.tar.bz2 | |
| && tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgcrypt-1.11.0 | |
| && sudo ./configure | |
| && sudo make install | |
| && sudo ldconfig | |
| # End Container Setup | |
| - name: Minimal Build Script | |
| working-directory: ${{github.workspace}} | |
| run: bash ${GITHUB_WORKSPACE}/support/scripts/build_minimal.sh | |
| # | |
| # Internal Build | |
| # | |
| internal_build: | |
| # Container Setup | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Update | |
| run: sudo apt-get update | |
| - name: Install Dependencies | |
| run: sudo apt-get install -y lcov libcurl4-openssl-dev libmariadb-dev libmariadb-dev-compat python3 | |
| - name: Install Python Libraries | |
| run: sudo pip install pycryptodome | |
| - name: Install Libgcrypt | |
| run: > | |
| curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 | |
| -o /tmp/libgpg-error-1.50.tar.bz2 | |
| && tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgpg-error-1.50 | |
| && sudo ./configure | |
| && sudo make install | |
| && curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 | |
| -o /tmp/libgcrypt-1.11.0.tar.bz2 | |
| && tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgcrypt-1.11.0 | |
| && sudo ./configure | |
| && sudo make install | |
| && sudo ldconfig | |
| # End Container Setup | |
| - name: Internal Build Script | |
| working-directory: ${{github.workspace}} | |
| run: bash ${GITHUB_WORKSPACE}/support/scripts/build_internal.sh | |
| - name: Code-Coverage | |
| working-directory: ${{github.workspace}} | |
| run: make gcov | |
| - name: Upload | |
| uses: codecov/codecov-action@v4 | |
| env: | |
| CODECOV_TOKEN: 71699f25-12a3-44a4-8a83-be777b9e577a | |
| with: | |
| files: 'coverage/*.c.gcov' | |
| verbose: true | |
| # | |
| # KMC Build | |
| # | |
| # kmc_build: | |
| # # Container Setup | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - uses: actions/checkout@v2 | |
| # - name: Update | |
| # run: sudo apt-get update | |
| # - name: Install Dependencies | |
| # run: sudo apt-get install -y lcov libcurl4-openssl-dev libmariadb-dev libmariadb-dev-compat python3 | |
| # - name: Install Python Libraries | |
| # run: sudo pip install pycryptodome | |
| # - name: Install Libgcrypt | |
| # run: > | |
| # curl | |
| # -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 | |
| # -o /tmp/libgpg-error-1.50.tar.bz2 | |
| # && tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/ | |
| # && cd /tmp/libgpg-error-1.50 | |
| # && sudo ./configure | |
| # && sudo make install | |
| # && curl | |
| # -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 | |
| # -o /tmp/libgcrypt-1.11.0.tar.bz2 | |
| # && tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/ | |
| # && cd /tmp/libgcrypt-1.11.0 | |
| # && sudo ./configure | |
| # && sudo make install | |
| # && sudo ldconfig | |
| # # End Container Setup | |
| # - name: KMC Build Script | |
| # working-directory: ${{github.workspace}} | |
| # run: bash ${GITHUB_WORKSPACE}/support/scripts/build_kmc.sh | |
| # - name: Code-Coverage | |
| # working-directory: ${{github.workspace}} | |
| # run: make gcov | |
| # - name: Upload | |
| # uses: codecov/codecov-action@v4 | |
| # env: | |
| # CODECOV_TOKEN: 71699f25-12a3-44a4-8a83-be777b9e577a | |
| # with: | |
| # files: 'coverage/*.c.gcov' | |
| # verbose: true | |
| # | |
| # Wolf Build | |
| # | |
| wolf_build: | |
| # Container Setup | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Update | |
| run: sudo apt-get update | |
| - name: Install Dependencies | |
| run: sudo apt-get install -y lcov libcurl4-openssl-dev libmariadb-dev libmariadb-dev-compat python3 autoconf libtool | |
| - name: Install Python Libraries | |
| run: sudo pip install pycryptodome | |
| - name: Install Libgcrypt | |
| run: > | |
| curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 | |
| -o /tmp/libgpg-error-1.50.tar.bz2 | |
| && tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgpg-error-1.50 | |
| && sudo ./configure | |
| && sudo make install | |
| && curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 | |
| -o /tmp/libgcrypt-1.11.0.tar.bz2 | |
| && tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgcrypt-1.11.0 | |
| && sudo ./configure | |
| && sudo make install | |
| && sudo ldconfig | |
| - name: Clone WolfSSL | |
| run: git clone --depth 1 --branch v5.6.0-stable https://github.com/wolfSSL/wolfssl.git /tmp/wolfssl | |
| # cmake -DCMAKE_INSTALL_PREFIX=/home/runner/.local -DWOLFSSL_AESCCM=yes -DWOLFSSL_AESSIV=yes -DWOLFSSL_CMAC=yes ..; | |
| - name: Build WolfSSL | |
| # -DCMAKE_INSTALL_PREFIX=/home/runner/.local | |
| #run: cd /tmp/wolfssl/; | |
| # sudo chown -R runner /usr/local; | |
| # ./autogen.sh; | |
| # sudo ./configure --enable-aesccm --enable-aessiv --enable-cmac; | |
| # make; | |
| # make install; | |
| #sudo chown -R runner /usr/local; | |
| run: mkdir /tmp/wolfssl/build; | |
| cd /tmp/wolfssl/build; | |
| cmake -DWOLFSSL_AESCCM=yes -DWOLFSSL_AESSIV=yes -DWOLFSSL_CMAC=yes ..; | |
| cmake --build .; | |
| sudo make install; | |
| sudo ldconfig; | |
| # End Container Setup | |
| - name: Wolf Build Script | |
| working-directory: ${{github.workspace}} | |
| run: bash ${GITHUB_WORKSPACE}/support/scripts/build_wolf.sh | |
| - name: Code-Coverage | |
| working-directory: ${{github.workspace}} | |
| run: make gcov | |
| - name: Upload | |
| uses: codecov/codecov-action@v4 | |
| env: | |
| CODECOV_TOKEN: 71699f25-12a3-44a4-8a83-be777b9e577a | |
| with: | |
| files: 'coverage/*.c.gcov' | |
| verbose: true | |
| # | |
| # RHEL Build | |
| # | |
| rhel_build: | |
| # Container Setup | |
| runs-on: ubuntu-latest | |
| container: | |
| image: rockylinux/rockylinux:8 | |
| steps: | |
| - uses: actions/checkout@v2 | |
| - name: Update | |
| run: yum update -y | |
| - name: Install Dependencies | |
| run: yum install -y epel-release python38-devel libcurl-devel git cmake gcc java-11-openjdk-devel openssl wget bzip2 ldconfig mariadb-devel mariadb-common mariadb-connector-c mariadb-connector-c-config mariadb-errmsg mariadb-gssapi-server | |
| # Might want to trim this down, but these dependencies should work for KMC | |
| - name: install lcov | |
| run: yum install -y --enablerepo=epel lcov | |
| - name: Install Python Dependencies | |
| run: pip3 install pycryptodome | |
| - name: Install Libgcrypt | |
| run: > | |
| curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.50.tar.bz2 | |
| -o /tmp/libgpg-error-1.50.tar.bz2 | |
| && tar -xjf /tmp/libgpg-error-1.50.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgpg-error-1.50 | |
| && ./configure | |
| && make install | |
| && curl | |
| -LS https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.11.0.tar.bz2 | |
| -o /tmp/libgcrypt-1.11.0.tar.bz2 | |
| && tar -xjf /tmp/libgcrypt-1.11.0.tar.bz2 -C /tmp/ | |
| && cd /tmp/libgcrypt-1.11.0 | |
| && ./configure | |
| && make install | |
| && echo "export LD_LIBRARY_PATH=/usr/local/lib/:/usr/local/include:$LD_LIBRARY_PATH" >> ~/.bashrc | |
| && source ~/.bashrc | |
| && ldconfig | |
| # End Container Setup | |
| - name: RHEL Build Script | |
| working-directory: ${{github.workspace}} | |
| run: source ~/.bashrc && ${GITHUB_WORKSPACE}/support/scripts/build_rhel.sh | |
| - name: Code-Coverage | |
| working-directory: ${{github.workspace}} | |
| run: source ~/.bashrc && make gcov | |
| - name: Upload | |
| uses: codecov/codecov-action@v4 | |
| env: | |
| CODECOV_TOKEN: 71699f25-12a3-44a4-8a83-be777b9e577a | |
| with: | |
| files: 'coverage/*.c.gcov' | |
| verbose: true |