Hi Tony, 2016-09-25 19:11 GMT+02:00 tony mancill <tmanc...@debian.org>: > On Mon, Sep 12, 2016 at 01:16:32AM +0200, Balint Reczey wrote: >> Source: antlr >> Version: 2.7.7+dfsg-7 >> Severity: important >> User: bal...@balintreczey.hu >> Usertags: pie-bindnow-20160906 >> Justification: makes gpt FTBFS with extra hardening >> Affects: gpt sqlitebrowser >> >> Dear Maintainers, >> >> During a rebuild of all packages in sid, gpt >> failed to build on amd64 with patched GCC and dpkg. The root >> cause seems to be that libantlr.a is shipped as a non-PIC library. > > Hi Balint, > > The libantlr-dev package is shipping two artifacts in /usr/lib: > > /usr/lib/libantlr-pic.a > /usr/lib/libantlr.a >
Yes, and shipping both is implemented in d/rules: ... $(MAKE) -C lib/cpp CXXFLAGS="+ -fPIC -DPIC" mv -f lib/cpp/src/libantlr.a debian/libantlr-pic.a $(MAKE) -C lib/cpp clean $(MAKE) -C lib/cpp ... > > Can the gpt and sqlitebrowser builds reference the libantlr-pic > library? Or is the request to *only* ship the -fPIC library? The two other packages could be fixed instead, but I believe shipping only libantlr.a compiled with -fPIC would result the best overall outcome partly due to simpler code in every affected package. Apparently only one package uses -pic.a which need to be changed: https://codesearch.debian.net/search?q=antlr-pic Please see related discussion on d-devel: https://lists.debian.org/debian-devel/2016/09/msg00277.html Cheers, Balint __ This is the maintainer address of Debian's Java team <http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.