Hi, > -----Original Message----- > From: Fabian Vogt <[email protected]> > Sent: Monday, November 3, 2025 1:34 PM > To: Guillaume Gardet <[email protected]>; [email protected] > Cc: Andreas Schwab <[email protected]> > Subject: Re: GCS (Guarded Control Stack) enablement > > Hi, > > Am Montag, 3. November 2025, 08:08:24 Mitteleuropäische Normalzeit schrieb > Andreas Schwab: > > On Okt 23 2025, Guillaume Gardet wrote: > > > > > To fix this warning, all the pieces need to be GCS enabled, aka, > > > dependency > libraries and assembler code, if any. > > > Usually, rebuilding dependencies should be enough. > > > > Pulishing is currently blocked on failing packages due to GCS errors. > > I tried to do selective rebuilds, but that lead to nowhere. So I > > forced a full rebuild, > > There are some packages like "akonadi" which did not get rebuilt against the > meanwhile GCS-enabled libaccounts-qt6.so. If that was a proper > rebuild="direct" > or "transitive", OBS should've rebuilt it. > > > only to find out that it didn't solve the errors. > > Basically, for whatever reason, the linker refrains from marking > > libQt5Core > > I had a look. There's src/corelib/global/minimum-linux.S which is an asm file > to > set .note.ABI-tag explicitly to the minimum Linux kernel version needed. > It also sets .note.GNU-stack, but not GNU-property. In Qt 6 it's done > differently in > C++ using a struct with _attribute__((section(".note.ABI-tag"))) > which I could backport (sr#1315285). Doesn't work on Leap 15.6 with gcc7, but > IMO that's not important. > > > and libcrypto with the GCS attribute, which causes the subsequent > > build failures. > > https://github.com/openssl/openssl/issues/27712 > > IMO ld should be called with "-z gcs-report-dynamic=none" for the time being. > That way we can avoid that the use of --fatal-warnings requires rebuilds.
As a workaround, we added " -Wl,-z,gcs-report-dynamic=none" to Optflags in OBS to silent the GCS errors. We will remove this workaround once enough packages are fixed. So, if your package broke with GCS error, you just need to trigger a rebuild. Thanks, Guillaume > > Cheers, > Fabian > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
