Debian Bug report logs - #837393
aespipe: FTBFS with bindnow and PIE enabled

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Balint Reczey <balint@balintreczey.hu>

To: submit@bugs.debian.org

Subject: aespipe: FTBFS with bindnow and PIE enabled

Date: Sun, 11 Sep 2016 11:46:52 +0200

Source: aespipe
Version: 2.4c-1
Severity: important
User: balint@balintreczey.hu
Usertags: pie-bindnow-20160906
Justification: FTBFS on amd64 with extra hardening

Hi,

During a rebuild of all packages in sid, your package failed to build on
amd64 with patched GCC and dpkg.

The rebuild tested if packages are ready for a transition
enabling PIE and bindnow for amd64.

For more information about the changes to sid's dpkg and GCC please
visit:
 https://wiki.debian.org/Hardening/PIEByDefaultTransition

Relevant part (hopefully):
...
x86_64-linux-gnu-gcc  -o aespipe aespipe.o aes-amd64.o md5-amd64.o
md5-2x-amd64.o aes-intel64.o sha512.o rmd160.o
/usr/bin/ld: aes-amd64.o: relocation R_X86_64_32S against `.rodata' can
not be used when making a shared object; recompile with -fPIC
/usr/bin/ld: final link failed: Nonrepresentable section on output
collect2: error: ld returned 1 exit status
Makefile:26: recipe for target 'aespipe' failed
make[1]: *** [aespipe] Error 1
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
debian/rules:45: recipe for target 'build-stamp' failed
make: *** [build-stamp] Error 2
dpkg-buildpackage: error: debian/rules build gave error exit status 2
...

The full build log is available from:
 https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/aespipe_2.4c-1_amd64.build.gz


Thanks,
Balint

Message #14 received at 837393@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@stusta.de>

To: 837393@bugs.debian.org

Subject: Fix for the aespipe PIE FTBFS

Date: Thu, 10 Nov 2016 11:24:03 +0200

Control: tags -1 patch

The aespipe PIE FTBFS can be fixed with the following change that
disables PIE:

--- debian/rules.old	2016-11-10 09:18:45.000000000 +0000
+++ debian/rules	2016-11-10 09:22:04.000000000 +0000
@@ -17,6 +17,9 @@
 endif
 endif
 
+CFLAGS += -no-pie
+LDFLAGS += -no-pie
+
 ifeq ($(DEB_HOST_ARCH),amd64)
 	DEBIAN_OPTIMIZE := amd64
 endif
@@ -31,7 +34,7 @@
 	ln -sf /usr/share/misc/config.sub .
 	ln -sf /usr/share/misc/config.guess .
 
-	CFLAGS="$(CFLAGS)" ./configure \
+	CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure \
 	  --host=$(DEB_HOST_GNU_TYPE) \
 	  --build=$(DEB_BUILD_GNU_TYPE) \
 	  --prefix=/usr \


cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

Message #23 received at 837393-close@bugs.debian.org (full text, mbox, reply):

From: Max Vozeler <xam@debian.org>

To: 837393-close@bugs.debian.org

Subject: Bug#837393: fixed in aespipe 2.4c-2

Date: Mon, 28 Nov 2016 10:33:25 +0000

Source: aespipe
Source-Version: 2.4c-2

We believe that the bug you reported is fixed in the latest version of
aespipe, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 837393@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Max Vozeler <xam@debian.org> (supplier of updated aespipe package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 11 Nov 2016 00:02:42 +0100
Source: aespipe
Binary: aespipe
Architecture: source amd64
Version: 2.4c-2
Distribution: unstable
Urgency: medium
Maintainer: Max Vozeler <xam@debian.org>
Changed-By: Max Vozeler <xam@debian.org>
Description:
 aespipe    - AES-encryption tool with loop-AES support
Closes: 826363 837393
Changes:
 aespipe (2.4c-2) unstable; urgency=medium
 .
   * Disable PIE, thanks Adrian Bunk (closes: #837393)
   * Recommend sharutils for uuencode (closes: #826363)
   * Update to non-ancient policy (3.9.8)
     - build-(indep|arch) targets
Checksums-Sha1:
 bcb8cbbe98815f45abee8cf3c8ffe3750d2ee165 1634 aespipe_2.4c-2.dsc
 198cc0bc1168a7a150de4b7308be096c903b0d90 106608 aespipe_2.4c.orig.tar.bz2
 62ba94cbaeb682cdadacb112bdcf52f140bb599d 3668 aespipe_2.4c-2.debian.tar.xz
 5ef92888392bab6933274c8f7a76291615071175 27416 aespipe-dbgsym_2.4c-2_amd64.deb
 164c2f139166a6b5701107272ca3630194618b70 38438 aespipe_2.4c-2_amd64.deb
Checksums-Sha256:
 78d38fa059506913b8ad0858c85b045e1b03c861beb40960eca7ec568a47fe64 1634 aespipe_2.4c-2.dsc
 260190beea911190a839e711f610ec3454a9b13985d35479775b7e26ad4c845e 106608 aespipe_2.4c.orig.tar.bz2
 f2e555ac909ffb7e231074638c354319e0c9e56cce1461385e4c8f7c07c96ec8 3668 aespipe_2.4c-2.debian.tar.xz
 06fba6921edeacdc0400d85cf89fd5ce8f30ac81e80c543ff24e8f0d6b41621a 27416 aespipe-dbgsym_2.4c-2_amd64.deb
 42ba7caa8b76fb0452746d35ed0587ea3bc3f2cd302cac2ed2f22995dd55ae85 38438 aespipe_2.4c-2_amd64.deb
Files:
 4f5047007711bfbf015314f77170844e 1634 utils optional aespipe_2.4c-2.dsc
 97b1f481721ea5d65018ddae1143bac5 106608 utils optional aespipe_2.4c.orig.tar.bz2
 aba33e2166270a3b4f544c9342386143 3668 utils optional aespipe_2.4c-2.debian.tar.xz
 071e1c0c58c484c2402852b0b3bfdb8c 27416 debug extra aespipe-dbgsym_2.4c-2_amd64.deb
 e597665ebc92f7f34b07a4ff419b8968 38438 utils optional aespipe_2.4c-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=L3XX
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.