[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#837664: marked as done (liborbit2-dev: Please build libname-server-2.a with -fPIC)

Your message dated Fri, 30 Sep 2016 22:09:02 +0000
with message-id <E1bq5zK-0003G1-LW@franck.debian.org>
and subject line Bug#837664: fixed in orbit2 1:2.14.19-2
has caused the Debian Bug report #837664,
regarding liborbit2-dev: Please build libname-server-2.a with -fPIC
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
837664: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837664
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: liborbit2-dev
Version: 1:2.14.19-1+b1
Severity: important
User: balint@balintreczey.hu
Usertags: pie-bindnow-20160906
Justification: makes libbonobo FTBFS with extra hardening
Affects: libbonobo

Dear Maintainers,

During a rebuild of all packages in sid, libbonobo
failed to build on amd64 with patched GCC and dpkg. The root
cause seems to be that libname-server-2.a is shipped as a non-PIC library.

The rebuild tested if packages are ready for a transition
enabling PIE and bindnow for amd64 (and selected architectures).

For more information about the changes to sid's dpkg and GCC please
visit:
 https://wiki.debian.org/Hardening/PIEByDefaultTransition

Relevant part of libbonobo's build log:
...
libtool: link: gcc -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=.
-fstack-protector-strong -Wformat -Werror=format-security -Wl,-z
-Wl,relro -Wl,-z -Wl,now -o .libs/bonobo-activation-server
activation-server-corba-extensions.o activation-context-query.o
activation-context-query-lexer.o activation-context-query-parser.o
activation-context-corba.o object-directory-corba.o
object-directory-load.o object-directory-activate.o
object-directory-config-file.o activation-server-main.o
-Wl,--export-dynamic -pthread -pthread  ../bonobo/.libs/libbonobo-2.so
../bonobo-activation/.libs/libbonobo-activation.so -lname-server-2
-lgmodule-2.0 -lgio-2.0 -lORBitCosNaming-2 -lORBit-2 -lgthread-2.0
-lgobject-2.0 -lglib-2.0 -lxml2 -pthread
/usr/bin/ld:
/usr/lib/gcc/x86_64-linux-gnu/6/../../../x86_64-linux-gnu/libname-server-2.a(orbit-name-server.o):
relocation R_X86_64_32 against `.rodata.str1.8' can not be used when
making a shared object; recompile with -fPIC
...

The full build log is available from:
 https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/libbonobo_2.32.1-3_amd64.build.gz

Thanks,
Balint

--- End Message ---
--- Begin Message --- 
Source: orbit2
Source-Version: 1:2.14.19-2

We believe that the bug you reported is fixed in the latest version of
orbit2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 837664@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Balint Reczey <balint@balintreczey.hu> (supplier of updated orbit2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 30 Sep 2016 21:13:57 +0200
Source: orbit2
Binary: liborbit-2-0 liborbit2 orbit2 orbit2-nameserver liborbit2-dev
Architecture: source
Version: 1:2.14.19-2
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Balint Reczey <balint@balintreczey.hu>
Description:
 liborbit-2-0 - high-performance CORBA implementation - common libraries
 liborbit2  - high-performance CORBA implementation - extra libraries
 liborbit2-dev - high-performance CORBA implementation - development
 orbit2     - high-performance CORBA implementation - Object Request Broker
 orbit2-nameserver - high-performance CORBA implementation - name server
Closes: 837664
Changes:
 orbit2 (1:2.14.19-2) unstable; urgency=medium
 .
   * QA upload.
   * Build using the -fPIC CFLAG (Closes: #837664)
Checksums-Sha1:
 d79f121751779970872732b35f5e9e0bab5a93a8 2054 orbit2_2.14.19-2.dsc
 4ca00846d0e9e6a3c2e9c44cadbae7914706ea31 14908 orbit2_2.14.19-2.debian.tar.xz
Checksums-Sha256:
 4b4f314d8992662874e7a551d405ec8f67e0342e129114a99c746c49964d6de7 2054 orbit2_2.14.19-2.dsc
 dfcbc076b50b47797450cc3c06ab54d03ad265eb6cfda3ec0bf58a207b5f9320 14908 orbit2_2.14.19-2.debian.tar.xz
Files:
 25d6eeafcbde8e579f1bc6300370e720 2054 net optional orbit2_2.14.19-2.dsc
 d1e48a3f9efc7cbce668db4b44fa8ffe 14908 net optional orbit2_2.14.19-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=GyWp
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: