Debian Bug report logs - #859372
grass shouldn't disable PIE

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: grass shouldn't disable PIE

Date: Sun, 02 Apr 2017 23:52:06 +0300

Source: grass
Version: 7.2.0-1
Severity: normal
Tags: patch

With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.

The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist, and grass builds with my patch.

Please consider applying the following patch:

--- debian/rules.old	2017-04-02 20:40:04.000000000 +0000
+++ debian/rules	2017-04-02 20:40:18.000000000 +0000
@@ -3,9 +3,8 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
-# Enable hardening build flags, except:
-#  pie: causes build failure
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+# Enable hardening build flags:
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
 VERSION=$(shell echo `head -2 $(CURDIR)/include/VERSION` | sed -e 's/ //')
 ABI=$(shell echo `head -3 $(CURDIR)/include/VERSION` | sed -e 's/ //g' -e 's/RC/-/')

Message #10 received at 859372-close@bugs.debian.org (full text, mbox, reply):

From: Bas Couwenberg <sebastic@debian.org>

To: 859372-close@bugs.debian.org

Subject: Bug#859372: fixed in grass 7.2.0-2

Date: Sun, 02 Apr 2017 23:19:49 +0000

Source: grass
Source-Version: 7.2.0-2

We believe that the bug you reported is fixed in the latest version of
grass, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 859372@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bas Couwenberg <sebastic@debian.org> (supplier of updated grass package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 02 Apr 2017 23:38:40 +0200
Source: grass
Binary: grass grass-core grass-gui grass-doc grass-dev-doc grass-dev
Architecture: source amd64 all
Version: 7.2.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>
Changed-By: Bas Couwenberg <sebastic@debian.org>
Description:
 grass      - Geographic Resources Analysis Support System (GRASS GIS)
 grass-core - GRASS GIS core components
 grass-dev  - GRASS GIS development files
 grass-dev-doc - GRASS GIS Programmers' Manual
 grass-doc  - GRASS GIS user documentation
 grass-gui  - GRASS GIS graphical user interfaces
Closes: 859372
Changes:
 grass (7.2.0-2) unstable; urgency=medium
 .
   * Enable PIE hardening flags.
     (closes: #859372)
   * Drop unused lintian overrides for hardening-no-pie.
Checksums-Sha1:
 c0e2e75f45e0ae219143c627ba94359724286841 2769 grass_7.2.0-2.dsc
 357a741c3f132bc19da0e8085d4288b6ea467425 30192 grass_7.2.0-2.debian.tar.xz
 f5f937d185b232e1424a94cded71be0fe22c5dbc 11492574 grass-core-dbgsym_7.2.0-2_amd64.deb
 dd6020326a89c22a3b614716bc90c9cc23e603cc 7728416 grass-core_7.2.0-2_amd64.deb
 0833cfb3565a27902b6da6442ae9840029544869 3662 grass-dev-dbgsym_7.2.0-2_amd64.deb
 a6075bb982c4c0ae29a2ab2aeac4fe206aad1ac6 8192016 grass-dev-doc_7.2.0-2_all.deb
 bddecc6f6f0b076a7e13968368df142710456ab5 201010 grass-dev_7.2.0-2_amd64.deb
 b540874fd1687ebb3fc289f22c247302c8b32d41 23877538 grass-doc_7.2.0-2_all.deb
 0cf2173eac750a50332df4c0385569743aa2c925 3205940 grass-gui_7.2.0-2_amd64.deb
 e46120f8599d3fbe9184583ecee4dc14a7f4b696 19492 grass_7.2.0-2_all.deb
 19a2e3cf6980a240ad5141bf7cf51602d58f2a19 18265 grass_7.2.0-2_amd64.buildinfo
Checksums-Sha256:
 7c9e2cd104edb28029b6a18e2e38e75e7ce78240b0b6d07d84fbfa1a01de016d 2769 grass_7.2.0-2.dsc
 f076bc510a6e4bd26ef91860c24fea8698a6a1fdd1a641ffdc42fc2e995890bb 30192 grass_7.2.0-2.debian.tar.xz
 423b7f419c1d4cfe6d109a97701efd2c01eb9ea663914f7d982550a66b65d30c 11492574 grass-core-dbgsym_7.2.0-2_amd64.deb
 a96c446edadef2d51076c6dec909ada3c16ca1c1595502603a7f97671526e931 7728416 grass-core_7.2.0-2_amd64.deb
 6c01e7cc144f0b3a6b70f180428a992953cdf8090681bbbd384475d91e395427 3662 grass-dev-dbgsym_7.2.0-2_amd64.deb
 d80150032a4b15f6090e70a6a9336b2f95b6cb9c6cab59d8d69a7350c626a0fa 8192016 grass-dev-doc_7.2.0-2_all.deb
 20b7ee09a92d1c0d6359ab0dd7d0919bc3366c4cc1d5fd8f9eee473f60f8640d 201010 grass-dev_7.2.0-2_amd64.deb
 7e90e6fb568fad0c54426b85d3ee0701b38164a5ffed044ac0e9ab0309157ae7 23877538 grass-doc_7.2.0-2_all.deb
 ab0941f29d52dfc6723f3fbeafb32e4c2fa237d05f6fe5ffb433b9ba9cd9d759 3205940 grass-gui_7.2.0-2_amd64.deb
 6686d47eb32270c8c8df83e8ad0b815c41f465ca790de68c9e93496dd2565e81 19492 grass_7.2.0-2_all.deb
 8b8c29cbbc8cd41ccb67429b853bf718a9887a489f57b4163a5e3822ee88db92 18265 grass_7.2.0-2_amd64.buildinfo
Files:
 7410fa91a70fd9939ce331f4caff5650 2769 science optional grass_7.2.0-2.dsc
 6d0a347cd58bf442d31d1a1a22ffe340 30192 science optional grass_7.2.0-2.debian.tar.xz
 0881e5d6e5b92c9b38591bf9c5c61af0 11492574 debug extra grass-core-dbgsym_7.2.0-2_amd64.deb
 6bc8d2e09cc5ba232486441b67edba95 7728416 science optional grass-core_7.2.0-2_amd64.deb
 20942fbb0a93f47f49298c8d6a7a4ad0 3662 debug extra grass-dev-dbgsym_7.2.0-2_amd64.deb
 819480a2940f16b4a09e9f1990c4a924 8192016 doc optional grass-dev-doc_7.2.0-2_all.deb
 d720a5a3d6f29605220937c6ec997076 201010 devel optional grass-dev_7.2.0-2_amd64.deb
 82f23fdd681002e276d60abeb6d0c785 23877538 doc optional grass-doc_7.2.0-2_all.deb
 d5d8a387efa523acfe270bfe4b999808 3205940 science optional grass-gui_7.2.0-2_amd64.deb
 a6ab2c4d8ab529a0a660b6349997fb96 19492 metapackages optional grass_7.2.0-2_all.deb
 2bcf437bf8d705ca14c776f41d7e2072 18265 science optional grass_7.2.0-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=o3ZY
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.