From: Tomas Mraz <tomas@openssl.org>
Date: Wed, 25 Mar 2026 17:54:18 +0000 (+0100)
Subject: Configurations/10-main.conf: minimum NASM version needs to be 2.09 on Windows
X-Git-Tag: openssl-4.0.0~83
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d1a02802be47a79ea8e3174506adbca5e4c50031;p=thirdparty%2Fopenssl.git

Configurations/10-main.conf: minimum NASM version needs to be 2.09 on Windows

Otherwise some assembler code might be miscompiled.

Fixes: https://github.com/openssl/openssl/issues/20529

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
MergeDate: Tue Mar 31 01:47:41 2026
(Merged from https://github.com/openssl/openssl/pull/30576)

(cherry picked from commit ba21ee3795679846001e84e599bb9b286e3e6dd9)
---

diff --git a/Configurations/10-main.conf b/Configurations/10-main.conf
index a038c3cb914..76cbf0ffa0c 100644
--- a/Configurations/10-main.conf
+++ b/Configurations/10-main.conf
@@ -5,7 +5,8 @@
 my $vc_win64a_info = {};
 sub vc_win64a_info {
     unless (%$vc_win64a_info) {
-        if (`nasm -v 2>NUL` =~ /NASM version ([0-9]+\.[0-9]+)/ && $1 >= 2.0) {
+        # Minimum NASM version is 2.09 otherwise SHA3 might be miscompiled
+        if (`nasm -v 2>NUL` =~ /NASM version ([0-9]+)\.([0-9]+)/ && ($1 > 2 || ($1 == 2 && $2 >= 9))) {
             $vc_win64a_info = { AS        => "nasm",
                                 ASFLAGS   => "-g",
                                 asflags   => "-Ox -f win64 -DNEAR",