Source: libctl-dev Version: 3.2.2-2 Severity: important User: bal...@balintreczey.hu Usertags: pie-bindnow-20160906 Justification: makes mpb FTBFS with extra hardening Affects: mpb
Dear Maintainers, During a rebuild of all packages in sid, mpb failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libctlgeom.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of mpb's build log: ... libtool: link: mpicc -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -W error=format-security -Wall -W -Wbad-function-cast -Wcast-qual -Wpointer-arith -Wcast-align -pedantic -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-L/usr/lib/x86_64-linux-gnu/hdf5/openmpi -o normal_vectors normal_ vectors.o -lctlgeom ../src/.libs/libmpb.a -L/usr/lib/gcc/x86_64-linux-gnu/6 -L/usr/lib/gcc/x86_64-lin ux-gnu/6/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/6/../../../../lib -L/lib/x86_64-lin ux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/6/. ./../.. -L/usr/lib/x86_64-linux-gnu/hdf5/openmpi -lctl -lguile-2.0 -lgc -lhdf5 -lz -llapack -lblas -lf ftw3 -lgfortran -lm -lquadmath /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/6/../../../x86_64-linux-gnu/libctlgeom.a(geom.o): relocation R_X86_64_32 against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/mpb_1.5-2_amd64.build.gz Thanks, Balint
