Your message dated Sun, 28 Dec 2025 15:06:30 +0100
with message-id <[email protected]>
and subject line Re: Bug#1123070: bearssl: autopkgtest failure on arm64 due to
GCS warning
has caused the Debian Bug report #1123070,
regarding bearssl: autopkgtest failure on arm64 due to GCS warning
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1123070: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123070
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: bearssl
Version: 0.6+dfsg.1-6
Severity: serious
User: [email protected]
Usertags: gcs
Hi,
bearssl's test "02ecdh-x25519" fails on arm64 starting with glibc
2.42-6, which enabled a security feature called Guarded Control Stack
(GCS).
To help with GCS adoption, the linker warns about shared libraries built
without GCS. A library used by bearssl's autopkgtest, lib25519, does not
support GCS yet (#1123048). Being printed to standard error the warning
causes tests such as 02ecdh-x25519 to fail.
The attached patch fixes 02ecdh-x25519 on arm64 by silencing the
warning.
Please see https://wiki.debian.org/ToolChain/GCS for further details.
diff --git a/debian/tests/02ecdh-x25519 b/debian/tests/02ecdh-x25519
index 0971d2e..4c7176a 100644
--- a/debian/tests/02ecdh-x25519
+++ b/debian/tests/02ecdh-x25519
@@ -21,6 +21,10 @@ trap "cleanup" EXIT TERM INT
# parse libs from .c file
libs=`grep '^#include <' "${dir}/${fn}.c" | grep '/* -l' | cut -d '*' -f2`
+if [ "$(dpkg --print-architecture)" = "arm64" ]; then
+ export DEB_LDFLAGS_MAINT_APPEND="-Wl,-z,gcs-report-dynamic=none"
+fi
+
# CC/CLFLAGS/LDFLAGS
CC=cc
CFLAGS=`dpkg-buildflags --get CFLAGS`
--- End Message ---
--- Begin Message ---
On 2025-12-19 16:49, Jan Mojzis wrote:
> lib25519 version 0~20241004-5 uploaded to the unstable
> (with temporary disabled ARM64 ASM)
>
> The tests should work again.
Indeed, therefore closing the bug.
Regards
Aurelien
--
Aurelien Jarno GPG: 4096R/1DDD8C9B
[email protected] http://aurel32.net
--- End Message ---
