open-quantum-safe / liboqs

82%

LAST BUILD ON BRANCH main

branch: main

CHANGE BRANCH

x

Reset

• main
• 2238_fix_msvc_warnings
• 2249_mlkem_licenses
• CROSS-no-inlined-exp
• acvp-lat
• add-markdown-linter
• add-poutine
• add_parantheses
• afi/enable-gcc-14
• armhf-tier-two
• ash_missing_lms_parms
• bbb_sntrup
• bench-to-weekly
• bhe-acvp-tst-fix
• bhe-commondep-inclonly
• bhe-memopt-build
• bhe-ppc-mlkem
• bhe-upd-mayo
• bhe-weekly-tests
• charishma_build_script
• ci-image-refresh-fixes
• ci/add_custom_timeout
• code-coverage
• codeql-openssl-return-check
• cross-2.2
• ct-tooling
• declassify_after_api_call
• deliverable/cbmc-owned-code
• deliverable/ci-fuzzing
• deliverable/ci-mutation-testing
• deliverable/docs-security-guidance
• dependabot/github_actions/github-actions-3c815a503c
• dependabot/github_actions/github-actions-5d7b3baceb
• dependabot/github_actions/github-actions-754f0868f5
• dependabot/github_actions/github-actions-8252db5a66
• dependabot/github_actions/github-actions-f253957208
• dependabot/pip/dot-github/workflows/idna-3.15
• dependabot/pip/dot-github/workflows/pip-09003775a4
• dependabot/pip/dot-github/workflows/pip-0f4be5aedf
• dependabot/pip/dot-github/workflows/pip-10fbcadc1c
• dependabot/pip/dot-github/workflows/pip-1439961f8a
• dependabot/pip/dot-github/workflows/pip-15ce36172b
• dependabot/pip/dot-github/workflows/pip-92bafd94cf
• dependabot/pip/dot-github/workflows/pip-9aa78c80e7
• dependabot/pip/dot-github/workflows/pip-d05869f971
• dependabot/pip/scripts/copy_from_upstream/idna-3.15
• deprecate-remove-dilithium
• dev
• dev_keccak_extract_arg_fix
• ds-0.14.0-release
• ds-0.14.1-dev
• ds-ai-pr-issue
• ds-algorithms-table
• ds-calloc-overflow
• ds-demote-armhf
• ds-dependabot-fixes
• ds-disable-travis
• ds-doxygen-style
• ds-fix-ci-permissions
• ds-fix-typo
• ds-governance-codeowners
• ds-kyber-codeowner
• ds-pip-updates
• ds-remove-sphincsplus
• ds-sha3-avx512vl-comment
• ds-sphincs-aliasing
• dsa_update
• encaps_derand
• extmu
• feature-allow-cmake-fetch-dependencies
• fix-2474-downstream-trigger
• fix-OV-III-pkc-skc
• fix-dlopen-err-clear-error
• fix-issue-2042-digest-squeeze
• fix-memoire-wycheproof
• fix-platforms-typo
• fix-poutine-scan
• fix-readme
• fix-windows-warnings
• fix-zero-sig-len
• fix/alternative-intel-sde-9.53.0-source
• fix/constant-time-failures-mceliece-avx2
• fix/cupqc-mlkem-derand-symbols
• fix/ghsa-jr5q-r9qx-v738
• fix/icicle-ml-kem-encap-derand
• fix/icicle_ml_kem_768
• fix/sha3-512-inc-avx512-rate-boundary
• fix_fuzzers
• fuzz-lms-sig-stfl-verify
• fuzz-xmss-sig-stfl-verify
• ghsa-5c97-hp95-vg56
• gitpython-update
• gyx-0.15.0-full-release
• gyx-0.15.0-release-candidate-2
• gyx-0.15.0-release-notes
• gyx-0.15.0-release-notes-typos
• gyx-2045-algorithm-support-table
• gyx-2203-swap-slhdsa-with-sphincs-in-std-algs
• gyx-2279-remove-git-tracked-acvp-test-vec
• gyx-2304-document-alpine-linux-support
• gyx-2311-slhdsa-c-integration-refactor
• gyx-additional-acvp-vectors-test
• gyx-cache-acvp-vectors
• gyx-global-compiler-optimiation-opt
• gyx-hqc-20250822
• gyx-oqsbuilder-structured-oqsbuildfile
• gyx-pin-wycheproof-commit
• gyx-remove-dilithium
• gyx-sunset-alpine-platform-test
• hss_hash_sets
• impl-docs
• issue-2265-test-kem-ntru-memory-sanitizer-failure
• kem_acvp
• lat_wyche
• mb-securitystmt
• mldsa-native
• mldsa-native-v1.0.0-beta
• mldsa-native-v1.0.0-beta2
• mlkem-native-v1.1.0
• na_add_nist_lms_kat
• na_fix_lms_#2321
• na_fix_over_read_xmss
• normalize-ml-kem-status
• optimize-basic-checks
• patch-1
• pqc_upstream_release_rc1
• prehash_dsa
• rand-seed-nonce-mldsa-sigs
• release/0.16.0-rc1
• remove-armel-comment
• revive_ntru
• rng-improvement
• sha3-dispatch-fix
• sig-sftl-keygen-supported
• single_call_hash_shims
• slh_acvp
• slh_dsa
• slh_shims
• sqisign
• stfl
• sw-code-coverage
• sw-pr-poc
• test-scripts-1408
• tests/improve_sha3_test
• update-mlkem-native-v1.2.0
• update_alg_info
• update_nixpkgs
• verified-nix-installation
• wyche
• wyche_dsa

Build # 28458811147

Build Type

push

github

Committed by web-flow

Commit Message

Route ERR_clear_error through dlsym wrapper in DLOPEN builds (#2484)

The EVP_DigestSqueeze probe added in #2433 calls ERR_clear_error()
directly instead of through the OSSL_FUNC() dlsym wrapper, and
ERR_clear_error was never added to ossl_functions.h. In a build with
OQS_DLOPEN_OPENSSL=ON, liboqs is not linked against libcrypto, so this
leaves an undefined ERR_clear_error symbol in liboqs.so. With BIND_NOW
(the default on most modern Linux distros) the symbol is resolved at
dlopen() time, so loading the library fails:

  OSError: liboqs.so.9: undefined symbol: ERR_clear_error

Add ERR_clear_error to the dlsym function table and call it via
OSSL_FUNC() like every other OpenSSL function.

Fixes open-quantum-safe/liboqs-python#122

Signed-off-by: Douglas Stebila <dstebila@uwaterloo.ca>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

0 of 1 new or added line in 1 file covered. (0.0%)

25 existing lines in 16 files now uncovered.

210183 of 255401 relevant lines covered (82.3%)

8143699.72 hits per line