Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #816919 > unrolled thread

Bug#859427: mlt shouldn't disable PIE

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#859427: mlt shouldn't disable PIE Adrian Bunk <bunk@debian.org> - 2017-04-03 14:40 +0200
    Bug#859427: mlt shouldn't disable PIE Patrick Matthäi <pmatthaei@debian.org> - 2017-04-03 20:00 +0200

#816919 — Bug#859427: mlt shouldn't disable PIE

Source: mlt
Version: 6.4.1-3
Severity: normal
Tags: patch

With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.

The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.

Please consider applying the following patch:

--- debian/rules.old	2017-04-03 12:20:51.000000000 +0000
+++ debian/rules	2017-04-03 12:20:56.000000000 +0000
@@ -1,6 +1,6 @@
 #!/usr/bin/make -f
 
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
 # Enable MMX and SSE on amd64 architecture
 ifeq ($(DEB_HOST_ARCH),$(findstring $(DEB_HOST_ARCH), "amd64"))

[toc] | [next] | [standalone]

#816983

[Multipart message — attachments visible in raw view] — view raw

Am 03.04.2017 um 14:28 schrieb Adrian Bunk:
> Source: mlt
> Version: 6.4.1-3
> Severity: normal
> Tags: patch
>
> With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
> semantics from "enable hardening but not PIE" to "enable all hardening
> and explicitely disable the default PIE".
> The latter is usually not intended.
>
> The -pie in hardening flags was in some cases required in pre-stretch
> releases to avoid build failures caused by (incorrectly) passing -fPIE
> to the compiler when building shared libraries or plugins.
> This problem does no longer exist.
>
> Please consider applying the following patch:
>
> --- debian/rules.old	2017-04-03 12:20:51.000000000 +0000
> +++ debian/rules	2017-04-03 12:20:56.000000000 +0000
> @@ -1,6 +1,6 @@
>  #!/usr/bin/make -f
>  
> -export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
> +export DEB_BUILD_MAINT_OPTIONS=hardening=+all
>  
>  # Enable MMX and SSE on amd64 architecture
>  ifeq ($(DEB_HOST_ARCH),$(findstring $(DEB_HOST_ARCH), "amd64"))
Thank you for this update. I will upload it in a few minutes now :)

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web