Source: unicon-imc2 Version: 3.0.4-14+b1 Severity: important User: bal...@balintreczey.hu Usertags: pie-bindnow-20160906 Justification: makes zhcon FTBFS with extra hardening Affects: zhcon
Dear Maintainers, During a rebuild of all packages in sid, zhcon failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libimmclient.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of zhcon's build log: ... g++ -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -funsigned-char -O2 -DNDEBUG -Wall -Wl,-z,relro -Wl,-z,now -o zhcon basefont.o big52gbdecoder.o big5decoder.o configfile.o console.o gb2big5decoder.o gbdecoder.o gbkdecoder.o graphdev.o hzdecoder.o jisdecoder.o kscdecoder.o main.o window.o winime.o zhcon.o overspotclient.o nativeinputserver.o inputclient.o inputmanager.o inputserver.o candilist.o uniconinputserver.o nativebarclient.o mouse.o encfilter.o iconv_string.o cmdline.o display/libdisplay.a -lgpm -L/usr/lib/unicon -limm_server -limmclient -lpth -ldl -lcurses -lutil /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/6/../../../../lib/libimmclient.a(TLC_LibImmClient.o): relocation R_X86_64_PC32 against symbol `TCP_Connect' can not be used when making a shared object; recompile with -fPIC /usr/bin/ld: final link failed: Bad value ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/zhcon_0.2.6-11_amd64.build.gz Thanks, Balint
