Debian 12 on x86_64 (QEMU pc-q35-7.2) – cryptography.hazmat.bindings._rust.openssl raises SIGILL #12069
Labels
waiting-on-reporter
Issue is waiting on a reply from the reporter. It will be automatically cloesd if there is no reply.
Comments
|
Does this reproduce with older versions of cryptography? I don't suppose its possible to figure out which instruction leads to the SIGILL? |
No, version 43.0.3 appears to work: $ python3 -mvenv cryptography-test
$ . cryptography-test/bin/activate
$ pip install --upgrade pip
$ pip install cryptography==43.0.3
# These instructions raise SIGILL in 44.0.0, because they load cryptography.hazmat.bindings._rust.openssl
$ python <<EOF
from cryptography.hazmat.primitives import serialization, hashes, padding
EOF
$ echo $?
0
Could you give me some pointers? I tried to hunt down the offending instruction, but at some point I had the impression I was going in circles, I cloned to repo, reset it to 44.0.0 and tried to run the test suite, but while I did install python development libraries with |
|
If you want to run It's interesting that 43.x works but 44.x doesn't. When you install 44.x, which .whl is being downloaded? |
|
I built a new Debian 12.8 x86_64 emulated VM on an M1 Max using the latest UTM and I can't replicate this error. |
cryptography-44.0.0-cp39-abi3-manylinux_2_34_x86_64.whl |
My version of UTM was indeed outdated. I upgraded it and can no longer reproduce the issue. What confuses me is that the module Thanks for having looked into this! |
|
Hi guys. It's interesting, but me too encounter the
|
|
Could you give us some details on the processor model? Pasting the output of cat /proc/cpuinfo would probably be enough data. |
Hi! No problem. |
|
Thanks, this is a non-AVX CPU, which suggests our |
|
I think we're going to need to file an issue with manylinux around how to handle this. In the meantime we've removed the Thanks for the continued report @NotStatilko |
You welcome. I'm pretty much noob when there is a "hardware" in question, but I can test something / give command outputs if you'll need it down the line. Feel free to tag me. No wonder something breaks on this ol' pile of trash xD |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
First of all, thank you for your work on cryptography. Unfortunately, I encountered a bug when trying to debug another package. Loading any of
cryptography.hazmat.bindings._rust.openssl(and consequently any module that depends on it) on an x86_64 build of Debian 12 running in QEMU's pc-q35-7.2 emulation on an Apple M1 raises SIGILL.Host
VM
QEMU command:
Steps to reproduce
The text was updated successfully, but these errors were encountered: