Source: libpapyrus3-dev Version: 3.7.1-1 Severity: important User: bal...@balintreczey.hu Usertags: pie-bindnow-20160906 Justification: makes gdcm FTBFS with extra hardening Affects: gdcm
Dear Maintainers, During a rebuild of all packages in sid, gdcm failed to build on amd64 with patched GCC and dpkg. The root cause seems to be that libPapyrus3.a is shipped as a non-PIC library. The rebuild tested if packages are ready for a transition enabling PIE and bindnow for amd64 (and selected architectures). For more information about the changes to sid's dpkg and GCC please visit: https://wiki.debian.org/Hardening/PIEByDefaultTransition Relevant part of gdcm's build log: ... /usr/bin/c++ -g -O2 -fdebug-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror= format-security -Wdate-time -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,-z,now -Wl,--as-needed CMakeFiles/ gdcmpap3.dir/gdcmpap3.cxx.o -o ../../bin/gdcmpap3 -rdynamic ../../bin/libgdcmMSFF.so.2.6.5 -Wl,-Bstat ic -lPapyrus3 -Wl,-Bdynamic ../../bin/libgdcmDICT.so.2.6.5 ../../bin/libgdcmIOD.so.2.6.5 ../../bin/lib gdcmDSED.so.2.6.5 ../../bin/libgdcmCommon.so.2.6.5 -Wl,-rpath-link,/<<PKGBUILDDIR>>/obj-x86_64-linux-g nu/bin /usr/bin/ld: /usr/lib/gcc/x86_64-linux-gnu/6/../../../../lib/libPapyrus3.a(PapyError3.c.o): relocation R_X86_64_32 against `.rodata.str1.8' can not be used when making a shared object; recompile with -fPI C ... The full build log is available from: https://people.debian.org/~rbalint/build-logs/pie-bindnow-20160906/gdcm_2.6.5-2_amd64.build.gz Thanks, Balint
