218753 2008-04-21 18:01 0000 [QA] dev-lang/python-2.5.2-r2 has executable stacks issues 2008-05-14 17:55:12 0000 1 1 1 Unclassified Gentoo Linux Applications unspecified All Linux CLOSED FIXED InSVN P2 normal --- 1 sandro.bonazzola@gmail.com python@gentoo.org sandro.bonazzola@gmail.com 2008-04-21 18:01:53 0000 dev-lang/python-2.5.2-r2 USE="berkdb doc gdbm ipv6 ncurses readline ssl threads tk -bootstrap -build -examples -sqlite -ucs2 -wininst" QA: other QA Notice: The following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/dev-lang/python-2.5.2-r2/temp/scanelf-execstack.log RWX --- --- usr/lib64/python2.5/lib-dynload/_ctypes.so sandro.bonazzola@gmail.com 2008-04-21 18:02:34 0000 Created an attachment (id=150514) scanelf-execstack sandro.bonazzola@gmail.com 2008-04-21 18:03:36 0000 # emerge --info Portage 2.1.5_rc5 (default/linux/amd64/2008.0/desktop, gcc-4.2.3, glibc-2.7-r2, 2.6.24-gentoo-r5 x86_64) ================================================================= System uname: 2.6.24-gentoo-r5 x86_64 AMD Athlon(tm) 64 Processor 3500+ Timestamp of tree: Mon, 21 Apr 2008 15:45:01 +0000 distcc 2.18.3 x86_64-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled] ccache version 2.4 [enabled] app-shells/bash: 3.2_p33 dev-java/java-config: 1.3.7, 2.1.5 dev-lang/python: 2.5.2-r2 dev-python/pycrypto: 2.0.1-r6 dev-util/ccache: 2.4-r7 sys-apps/baselayout: 2.0.0 sys-apps/openrc: 0.2.2 sys-apps/sandbox: 1.2.18.1-r2 sys-devel/autoconf: 2.13, 2.62 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1 sys-devel/binutils: 2.18-r1 sys-devel/gcc-config: 1.4.0-r4 sys-devel/libtool: 1.5.26 virtual/os-headers: 2.6.25-r1 ACCEPT_KEYWORDS="amd64 ~amd64" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=athlon64 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/4.0/env /usr/kde/4.0/share/config /usr/kde/4.0/shutdown /usr/share/config /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/initng/daemon /etc/initng/net /etc/initng/system /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d" CXXFLAGS="-march=athlon64 -O2 -pipe" DISTDIR="/home/ftp/distfiles" EMERGE_DEFAULT_OPTS="--with-bdeps y" FEATURES="ccache collision-protect cvs distlocks elog java-strict metadata-transfer multilib-strict parallel-fetch sandbox sfperms sign strict stricter unmerge-orphans userfetch userpriv usersandbox" GENTOO_MIRRORS="ftp://mirror.switch.ch/mirror/gentoo/ " LANG="it_IT.UTF-8" LC_ALL="it_IT.UTF-8" LDFLAGS="" LINGUAS="it" PKGDIR="/home/ftp/packages" PORTAGE_COMPRESS="bzip2" PORTAGE_COMPRESS_FLAGS="-9" PORTAGE_RSYNC_EXTRA_OPTS=" --timeout=800 --progress " PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/overlays/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="3dnow 3dnowext 3ds 7zip X a52 aac acl acpi alsa amd64 amr apache2 arts audiofile avahi bash-completion berkdb bl branding bzip2 cairo cal3d caps ccache cdb cddb cdparanoia cdr cg chroot cli cpudetection cracklib crypt css cups curl custom-cflags dbus devhelp dga directfb disk-partition djvu dmi dovecot-sasl dri dts dv dvd dvdr dvdread emboss emerald encode epydoc erandom esd evo exif expat extrafilters fam fame ffmpeg firefox flac fltk foomaticdb fortran gd gdbm ggi gif gimp glib glibc-omitfp glitz glut gmp gnokii gnome gnutls gphoto2 gpm graphviz gsm gstreamer gtk gtkhtml guile hal hbci howl-compat iconv idn ieee1394 imagemagick imlib ipv6 isc isdnlog ithreads java javacomm javascript jbig jce jikes jpeg jpeg2k justify kde kdeenablefinal kdehiddenvisibility kqemu lcms ldap libcaca libnotify linuxthreads-tls lm_sensors logitech-mouse logrotate lzo mad mailwrapper matroska mbox mdb mhash midi mikmod mjpeg mmap mmx mmxext mng motif mozdevelop mp3 mpeg mppe-mppc msn mudflap multilib musepack musicbrainz mysql ncurses nfs nls nptl nptlonly nsplugin numeric nvidia odbc ode offensive ofx ogg ogre openexr opengl openmp oss pam parport pch pcre pdf perl php png povray ppds pppd print pulseaudio python qa qt3 qt3support qt4 quicktime quotes rdesktop readline reflection resolvconf restrict-javascript rtc samba scanner sdl session slang slp smime sndfile snmp speex spell spl sse sse2 ssl startup-notification subversion svg sysfs syslog tcpd test tetex tga theora threads tidy tiff timidity tk truetype unicode usb userlocales utempter v4l v4l2 vcd vda vorbis vorbis-psy wma wmf wmp xattr xcomposite xforms xine xinerama xml xorg xpm xprint xscreensaver xv xvid xvmc yv12 zeroconf zlib" ALSA_CARDS="intel8x0" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" APACHE2_MPMS="worker" CAMERAS="canon directory panasonic pccam300 " ELIBC="glibc" FOO2ZJS_DEVICES="hp1005 hpp1005" INPUT_DEVICES="mouse evdev keyboard" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="it" USERLAND="GNU" VIDEO_CARDS="nvidia nv" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, MAKEOPTS hawking@gentoo.org 2008-04-21 23:11:50 0000 This¹ patch should fix it. It's a dirty hack to pass -Wa,--noexecstack to cflags when building ctypes. This will be included in the next revision bump. ¹: http://overlays.gentoo.org/proj/python/changeset/57 hawking@gentoo.org 2008-05-13 15:49:15 0000 2.5.2-r3 fixes this. Thanks for reporting :) sandro.bonazzola@gmail.com 2008-05-14 17:55:12 0000 Verified working. Thanks for fixing :-) 150514 2008-04-21 18:02 0000 scanelf-execstack scanelf-execstack.log text/plain UldYIC0tLSAtLS0gaW1hZ2UvdXNyL2xpYjY0L3B5dGhvbjIuNS9saWItZHlubG9hZC9fY3R5cGVz LnNvClJXWCAtLS0gLS0tIHdvcmsvUHl0aG9uLTIuNS4yL2J1aWxkL2xpYi5saW51eC14ODZfNjQt Mi41L19jdHlwZXMuc28KIVdYIC0tLSAtLS0gd29yay9QeXRob24tMi41LjIvYnVpbGQvdGVtcC5s aW51eC14ODZfNjQtMi41L3Zhci90bXAvcG9ydGFnZS9kZXYtbGFuZy9weXRob24tMi41LjItcjIv d29yay9QeXRob24tMi41LjIvTW9kdWxlcy9fY3R5cGVzL2xpYmZmaS9zcmMveDg2L3VuaXg2NC5v Cg==