Source: libbmusb-dev Version: 0.5.1-1 Severity: important User: [email protected] Usertags: pie-bindnow-20160906 Justification: makes nageru FTBFS with extra hardening Affects: nageru
Dear Maintainers, During a rebuild of all packages in sid, nageru failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libbmusb.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of nageru's build log: ... g++ -o nageru glwidget.o main.o mainwindow.o vumeter.o lrameter.o vu_common.o correlation_meter.o abou tdialog.o glwidget.moc.o mainwindow.moc.o vumeter.moc.o lrameter.moc.o correlation_meter.moc.o aboutdi alog.moc.o mixer.o pbo_frame_allocator.o context.o ref_counted_frame.o theme.o resampling_queue.o httpd.o ebu_r128_proc.o flags.o image_input.o stereocompressor.o filter.o alsa_output.o correlation_measurer.o quicksync_encoder.o x264_encoder.o x264_speed_control.o video_encoder.o metacube2.o mux.o audio_encoder.o ffmpeg_raii.o decklink_capture.o decklink/DeckLinkAPIDispatch.o -Wl,-z,relro -Wl,-z,now -lQt5OpenGLExtensions -lQt5OpenGL -lQt5Widgets -lQt5Gui -lQt5Core -lusb-1.0 -lmovit -llua5.2 -lmicrohttpd -lepoxy -lx264 -lbmusb -pthread -lva -lva-drm -lva-x11 -lX11 -lavformat -lavcodec -lavutil -lswscale -lavresample -lzita-resampler -lasound -ldl /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/6/../../../x86_64-linux-gnu/libbmusb.a(bmusb.o): relocation R_X86_64_32 against `.rodata.str1.8' can not be used when making a shared object; recompile with -fPIC ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/nageru_1.3.4-2_amd64.build.gz Thanks, Balint
