Source: libgadap-dev Version: 2.0-6 Severity: important User: bal...@balintreczey.hu Usertags: pie-bindnow-20160906 Justification: makes grads FTBFS with extra hardening Affects: grads
Dear Maintainers, During a rebuild of all packages in sid, grads failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libgadap.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of grads's build log: ... g++ -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -rdynamic -Wl,-z,relro -Wl,-z,now -L/usr/lib/x86_64-linux-gnu/hdf5/serial -Lyes/lib -Wl,--as-needed -o grads grads.o gxsubs.o gxmeta.o gxchpl.o gxcntr.o gxstrm.o gxwmap.o gxshad.o gxshad2.o gaexpr.o gafunc.o gautil.o gagx.o gscrpt.o gamach.o bufrstn.o gabufr.o gabufrtbl.o gxdxwd.o galloc.o dodstn.o gaddes.o gaio.o gacfg.o gauser.o gasdf.o gatxt.o gxX.o gxC.o gxprint.o -L/usr/lib -lX11 -lXext -lreadline -ltermcap -lgd -lpng16 -lz -ljpeg -lgrib2c -lmfhdfalt -ldfalt -ludunits2 -lsz -ljpeg -lz -lhdf5 -ljpeg -lz -lsz -lnetcdf -ludunits2 -ltiff -lgeotiff -lshp -lgadap -ldapclient -ldap -lcurl -lxml2 -lz -lpthread -lm -ldl -lrt -lcairo -lXrender -lfontconfig -lfreetype -lpixman-1 -lpng16 -lxml2 -lz -lm -lcairo -lfreetype /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/6/../../../x86_64-linux-gnu/libgadap.a(gadap.o): relocation R_X86_64_32 against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/grads_2.1.a3-3_amd64.build.gz Thanks, Balint
