Bugzilla Bug 117535

This is another ebuild that seems to be having insecure RUNPATH error:

...

making executable: /usr/lib/liblavfile-1.8.so.0.0.0
making executable: /usr/lib/liblavjpeg-1.8.so.0.0.0
making executable: /usr/lib/liblavplay-1.8.so.0.0.0
making executable: /usr/lib/liblavrec-1.8.so.0.0.0
making executable: /usr/lib/libmjpegutils-1.8.so.0.0.0
making executable: /usr/lib/libmpeg2encpp-1.8.so.0.0.0
making executable: /usr/lib/libmplex2-1.8.so.0.0.0

QA Notice: the following files contain insecure RUNPATH's
 Please file a bug about this at http://bugs.gentoo.org/
 For more information on this issue, kindly review:
 http://bugs.gentoo.org/81745
/var/tmp/portage/mjpegtools-1.8.0-r1/image//usr/lib:/usr/lib/gcc-lib/i386-pc-linux-gnu/3.3.6
usr/bin/lavplay


My emerge --info:

Portage 2.0.53 (default-linux/x86/2005.1, gcc-3.4.4, glibc-2.3.5-r2,
2.6.14-gentoo-r2 i686)
=================================================================
System uname: 2.6.14-gentoo-r2 i686 Intel(R) Pentium(R) M processor 1.86GHz
Gentoo Base System version 1.6.13
dev-lang/python:     2.3.5-r2, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.20
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.3/env
/usr/kde/3.3/share/config /usr/kde/3.3/shutdown /usr/kde/3.4/env
/usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config
/usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config
/var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/splash /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=pentium-m -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig candy digest distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org
http://distro.ibiblio.org/pub/linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 X aac aalib acpi alsa apm arts audiofile avi berkdb bitmap-fonts bzip2
cdparanoia cdr cdrom crypt cups curl dbus divx4linux dv dvd dvdread eds emboss
encode epiphany esd ethereal exif expat fam fbcon ffmpeg firefox flac flash
foomaticdb fortran freetype gd gdbm gif glut gnome gphoto2 gpm gstreamer gtk
gtk2 guile hal howl idn imagemagick imlib ipv6 java jpeg junit lame lcms ldap
libg++ libwww live mad mikmod mjpeg mmx mng mono motif mozilla mp3 mpeg mpeg4
mplayer mysql ncurses nls ogg oggvorbis opengl oss pam pcre pdflib perl png
python qt quicktime readline real rtc samba scanner sdl speex spell sqlite sse
sse2 ssl svg svga tcltk tcpd theora tiff truetype truetype-fonts type1
type1-fonts udev usb vcd vidix vorbis vorbix webservices win32codecs xine xml
xml2 xmms xrandr xscreensaver xv xvid zeroconf zlib userland_GNU kernel_linux
elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS




!!! ERROR: media-video/mjpegtools-1.8.0-r1 failed.
!!! Function dyn_install, Line 1057, Exitcode 0
!!! Insecure binaries detected
!!! If you need support, post the topmost build error, NOT this status message.

works fine for me ... please run `emerge mjpegtools >& log` and post the log as
an attachment

Created an attachment (id=76465) [details]
emerge log of mjpegtools-1.8.0-r1

Here is the log as you requested

Ccing maintainers.
vapier: does the requested log talk to you ?

Cannot reproduce here.

Created an attachment (id=79498) [details]
New emerge log showing libtool warnings

I have attached a new emerge log (after upgrading gcc and the latest emerge
-uDv world). There are a lot of libtool warnings. Is that normal? The insecure
RUNPATH error at the bottom of the log is also different.

if you're referring to the -mcpu warning, that is from gcc, not libtool ... and
it's normal, read the warning message and you should be able to figure out
what's wrong

this looks screwed up to me:

make[1]: Warning: File `/usr/include/SDL/SDL.h' has modification time 5.4e+08 s
in the future

make sure your clock isnt broken, run `touch /usr/include/SDL/SDL.h`, and then
re-emerge mjpegtools

My clock is correct. For whatever reason /usr/include/SDL/SDL.h must have had
the wrong timestamp but now it has a valid date and time. So I emerged
mjpegtools and it builds fine :)

I understand the -mcpu warning but I have not set it. This is what my make.conf
file looks like:

CHOST="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium-m -pipe -fomit-frame-pointer"
CXXFLAGS="${CFLAGS}"

I have not set -mcpu so I assume it's set by the ebuild or in the source ??

The libtool warnings I refer to could be normal but they look like this:

libtool: install: warning:
`/var/tmp/portage/mjpegtools-1.8.0-r1/work/mjpegtools-1.8.0/utils/libmjpegutils.la'
has not been installed in `/usr/lib'

You can see them around line 1380 in the log.

Thanks.

> My clock is correct. For whatever reason /usr/include/SDL/SDL.h must have had
> the wrong timestamp but now it has a valid date and time. So I emerged
> mjpegtools and it builds fine :)

ok, marking bug as INVALID then

> I understand the -mcpu warning but I have not set it. This is what my
> make.conf file looks like:

ah, this is the configure script misbehaving ... i'll fix this in portage

> The libtool warnings I refer to could be normal but they look like this:
> libtool: install: warning:
`/var/tmp/portage/mjpegtools-1.8.0-r1/work/mjpegtools-1.8.0/utils/libmjpegutils.la'
> has not been installed in `/usr/lib'

that is normal, just ignore it