Hi, I wanted to enable all compiler/linker hardening flags to enhance security of mlt and to resolve these "issues":
X: python-mlt: hardening-no-bindnow usr/lib/python2.7/dist-packages/_mlt.x86_64-linux-gnu.so X: libmlt++3: hardening-no-bindnow usr/lib/x86_64-linux-gnu/libmlt++.so.6.0.0 X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/libmlt.so.6.0.0 X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltavformat.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltcore.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltdecklink.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltfrei0r.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltgtk2.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltjackrack.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltkdenlive.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltlinsys.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltmotion_est.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltnormalize.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltoldfilm.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltopengl.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltplus.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltplusgpl.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltqt.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltresample.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltsdl.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltsox.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltvideostab.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltvmfx.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltxine.so X: libmlt6: hardening-no-bindnow usr/lib/x86_64-linux-gnu/mlt/libmltxml.so X: melt: hardening-no-pie usr/bin/melt X: melt: hardening-no-bindnow usr/bin/melt But with pie and bindnow the package fails to build: cc -g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -DARCH_X86_64 -Wall -DPIC -O2 -pipe -fno-tree-dominator-opts -fno-tree-pre -ffast-math -DUSE_MMX -DUSE_SSE -DUSE_SSE2 -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -fPIC -pthread -DARCH_X86_64 -Wall -DPIC -O2 -pipe -fno-tree-dominator-opts -fno-tree-pre -ffast-math -DUSE_MMX -DUSE_SSE -DUSE_SSE2 -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -fPIC -pthread -rdynamic -DPREFIX_DATA="\"/usr/share/mlt\"" -DPREFIX_LIB="\"/usr/lib/x86_64-linux-gnu/mlt\"" -Wdate-time -D_FORTIFY_SOURCE=2 -c -o mlt_cache.o mlt_cache.c cc -g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -DARCH_X86_64 -Wall -DPIC -O2 -pipe -fno-tree-dominator-opts -fno-tree-pre -ffast-math -DUSE_MMX -DUSE_SSE -DUSE_SSE2 -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -fPIC -pthread -DARCH_X86_64 -Wall -DPIC -O2 -pipe -fno-tree-dominator-opts -fno-tree-pre -ffast-math -DUSE_MMX -DUSE_SSE -DUSE_SSE2 -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -fPIC -pthread -rdynamic -DPREFIX_DATA="\"/usr/share/mlt\"" -DPREFIX_LIB="\"/usr/lib/x86_64-linux-gnu/mlt\"" -Wdate-time -D_FORTIFY_SOURCE=2 -c -o mlt_animation.o mlt_animation.c cc -shared -Wl,-soname,libmlt.so.6 -Wl,--version-script=mlt.vers -o libmlt.so.6.0.0 mlt_frame.o mlt_version.o mlt_geometry.o mlt_deque.o mlt_property.o mlt_properties.o mlt_events.o mlt_parser.o mlt_service.o mlt_producer.o mlt_multitrack.o mlt_playlist.o mlt_consumer.o mlt_filter.o mlt_transition.o mlt_field.o mlt_tractor.o mlt_factory.o mlt_repository.o mlt_pool.o mlt_tokeniser.o mlt_profile.o mlt_log.o mlt_cache.o mlt_animation.o -fPIE -pie -Wl,-z,relro -Wl,-z,now -Wl,--no-undefined -Wl,--as-needed -Wl,--no-undefined -Wl,--as-needed -ldl -lpthread -lm /usr/lib/gcc/x86_64-linux-gnu/5/../../../x86_64-linux-gnu/Scrt1.o: In function `_start': (.text+0x20): undefined reference to `main' collect2: error: ld returned 1 exit status Makefile:96: recipe for target 'libmlt.so.6.0.0' failed -- /* Mit freundlichem Gruß / With kind regards, Patrick Matthäi GNU/Linux Debian Developer Blog: http://www.linux-dev.org/ E-Mail: pmatth...@debian.org patr...@linux-dev.org */ ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 _______________________________________________ Mlt-devel mailing list Mlt-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/mlt-devel
