Debian Bug report logs - #859354
chasen shouldn't disable PIE

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: chasen shouldn't disable PIE

Date: Sun, 02 Apr 2017 21:34:23 +0300

Source: chasen
Version: 2.4.5-33
Severity: normal
Tags: patch

With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.

For packages like chasen that include static libraries the situation
is even worse, since non-PIE static libraries cannot be used with
the stretch gcc unless -no-pie is explicitly passed when linking.

The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.

Please consider applying the following change:

--- debian/rules.old	2017-03-20 10:26:29.000000000 +0000
+++ debian/rules	2017-03-20 10:26:33.000000000 +0000
@@ -1,7 +1,7 @@
 #!/usr/bin/make -f
 #export DH_VERBOSE=1
 
-export DEB_BUILD_MAINT_OPTIONS := hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS := hardening=+all
 
 %:
 	dh $@ --with autoreconf

Message #10 received at 859354-close@bugs.debian.org (full text, mbox, reply):

From: NOKUBI Takatsugu <knok@daionet.gr.jp>

To: 859354-close@bugs.debian.org

Subject: Bug#859354: fixed in chasen 2.4.5-34

Date: Sun, 02 Apr 2017 23:33:56 +0000

Source: chasen
Source-Version: 2.4.5-34

We believe that the bug you reported is fixed in the latest version of
chasen, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 859354@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
NOKUBI Takatsugu <knok@daionet.gr.jp> (supplier of updated chasen package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 02 Apr 2017 23:12:17 +0000
Source: chasen
Binary: libchasen-dev libchasen2 chasen chasen-dictutils
Architecture: source i386
Version: 2.4.5-34
Distribution: unstable
Urgency: medium
Maintainer: "Natural Language Processing, Japanese" <pkg-nlp-ja-devel@lists.alioth.debian.org>
Changed-By: NOKUBI Takatsugu <knok@daionet.gr.jp>
Description:
 chasen     - Japanese Morphological Analysis System
 chasen-dictutils - Japanese Morphological Analysis System - utilities for dictionary
 libchasen-dev - Japanese Morphological Analysis System (libraries and headers)
 libchasen2 - Japanese Morphological Analysis System (shared libraries)
Closes: 859354
Changes:
 chasen (2.4.5-34) unstable; urgency=medium
 .
   * debian/rules: remove -pie flag on hardening flags, closes: #859354
Checksums-Sha1:
 70f2c6f8a416c53e161fcee43941991e0097002d 2139 chasen_2.4.5-34.dsc
 ef89dd0fced4df6e21309547fdc40c84ef30ac8e 11588 chasen_2.4.5-34.debian.tar.xz
 5efcd90a8e52e7e280eeb4a40c254c683a8564a5 6248 chasen-dbgsym_2.4.5-34_i386.deb
 eb4d1a03b131a78d3bf96dd15133ae19119f86a2 26486 chasen-dictutils-dbgsym_2.4.5-34_i386.deb
 42181c38df55a0a175d310b908481e4268ca7711 26686 chasen-dictutils_2.4.5-34_i386.deb
 fcc82187f387463d2532aac37a72be2a1e8a060a 7648 chasen_2.4.5-34_i386.buildinfo
 181d2755ffdcfb42c21607dc915da2a5f61d30ec 447244 chasen_2.4.5-34_i386.deb
 f6d1f7092238369367c78e823bd5ec26d02f7720 59492 libchasen-dev_2.4.5-34_i386.deb
 2e577b7bdce379f86e83d1ee06d20ecc37afd9c7 131494 libchasen2-dbgsym_2.4.5-34_i386.deb
 f4af727461c2741e05877612d984a714ce485ee7 53532 libchasen2_2.4.5-34_i386.deb
Checksums-Sha256:
 f4f33f78223c5d1f6b81a76fb09d8cb373d418a2d3c5724f479257559e0357f6 2139 chasen_2.4.5-34.dsc
 8de79a84bcd9c1e103a282482587993bc316f9c464f72fcbe3abf937f4990e22 11588 chasen_2.4.5-34.debian.tar.xz
 16146fb8934afed954221514e87d814b0c8362eaf333f6beb3aa8664ff8116f9 6248 chasen-dbgsym_2.4.5-34_i386.deb
 10aa389cec5deeb4eb32b9d285577d7210176d5c1f87f8ceff734dada27cf299 26486 chasen-dictutils-dbgsym_2.4.5-34_i386.deb
 54d4794d3216f8cfc126a81269aaab6ed7e9ea40bf10bbcf5703f58bfbff10e4 26686 chasen-dictutils_2.4.5-34_i386.deb
 845146d2b21db94d3746ec09dd09435a6e76f7e16a09190aee6bcc0f6a9bdde1 7648 chasen_2.4.5-34_i386.buildinfo
 70b5ff119c041fd611094f334f666d5bcb88db0ca14aad8aca1a0323272d123a 447244 chasen_2.4.5-34_i386.deb
 29d42adac4968b35cd23b8145fd50e029c668defa3022a8979655f9450f78a2c 59492 libchasen-dev_2.4.5-34_i386.deb
 c09c99661e10164023f0fcfbd46bbf31846fbaa653f0bf7ef5787f2bf6fe5711 131494 libchasen2-dbgsym_2.4.5-34_i386.deb
 e8c4fe6be9276e5c60b751c7bc59c005f4c66f096463b03e162258fca4fc103e 53532 libchasen2_2.4.5-34_i386.deb
Files:
 ecb9632d521e294afe33b4180e562fa8 2139 misc optional chasen_2.4.5-34.dsc
 0db245c9cd011bfb73043effbd3d1a91 11588 misc optional chasen_2.4.5-34.debian.tar.xz
 e1b79a75f85ed14fcafd947192f47662 6248 debug extra chasen-dbgsym_2.4.5-34_i386.deb
 cb36657b071d014515993cdd089f08d1 26486 debug extra chasen-dictutils-dbgsym_2.4.5-34_i386.deb
 b638b84cddf274fa0239d7d93bd8ff5a 26686 misc optional chasen-dictutils_2.4.5-34_i386.deb
 627fe9abd53dfcfd9046be00dd372acd 7648 misc optional chasen_2.4.5-34_i386.buildinfo
 b3e5b1dfa4910114d14bb4013787fc25 447244 misc optional chasen_2.4.5-34_i386.deb
 fa10f3b2579be11b6464618b398cc947 59492 libdevel optional libchasen-dev_2.4.5-34_i386.deb
 0e9757eee90e31f48e06be5ccef45e66 131494 debug extra libchasen2-dbgsym_2.4.5-34_i386.deb
 975c8d9cde51401f029f228af5f278ca 53532 libs optional libchasen2_2.4.5-34_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=qwd6
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.