Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 212692 - gnustep-base/gnustep-base has executable stacks
Summary: gnustep-base/gnustep-base has executable stacks
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Gnustep project
URL:
Whiteboard:
Keywords:
Depends on: 235922
Blocks:
  Show dependency tree
 
Reported: 2008-03-08 11:04 UTC by Santiago M. Mola (RETIRED)
Modified: 2008-11-26 15:48 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Santiago M. Mola (RETIRED) gentoo-dev 2008-03-08 11:04:25 UTC
* QA Notice: The following files contain executable stacks
*  Files with executable stacks will not work properly (or at all!)
*  on some architectures/operating systems.  A bug should be filed
*  at http://bugs.gentoo.org/ to make sure the file is fixed.
*  For more information, see http://hardened.gentoo.org/gnu-stack.xml
*  Please include this file in your report:
*  /var/tmp/portage/gnustep-base/gnustep-base-1.14.1/temp/scanelf-execstack.log
* RWX --- --- usr/GNUstep/System/Library/Libraries/libgnustep-base.so.1.14.1


That's what I get emerging gnustep-base/gnustep-base-1.14.1 with USE="-gcc-libffi" (didn't test with gcc-libffi enabled).

mangurrian ~ # emerge --info
Portage 2.1.4.4 (default-linux/amd64/2007.0/desktop, gcc-4.1.2, glibc-2.6.1-r0, 2.6.24-gentoo-r2 x86_64)
=================================================================
System uname: 2.6.24-gentoo-r2 x86_64 Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz
Timestamp of tree: Fri, 07 Mar 2008 16:17:01 +0000
app-shells/bash:     3.2_p17-r1
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r9
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=nocona -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=nocona -O2 -pipe"
DISTDIR="/var/distfiles"
FEATURES="collision-protect distlocks metadata-transfer multilib-strict sandbox sfperms strict test unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X aac acl acpi alsa amd64 bash-completion berkdb bluetooth branding cairo cdr cli cracklib crypt cups d dbus dri dvd dvdr dvdread eds emboss encode esd evo fam firefox flac fortran gcj gdbm gif gnome gpm gstreamer gtk hal iconv isdnlog jpeg kerberos ldap mad midi mikmod mmx mono mp3 mpeg mudflap musepack ncurses nls nptl nptlonly objc ogg opengl openmp pam pcmcia pcre pdf perl png pppd python qt3 qt3support qt4 quicktime readline reflection sdl session spell spl sse sse2 ssl svg tcpd theora tiff truetype unicode usb vorbis xml xorg xpm xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="none vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Santiago M. Mola (RETIRED) gentoo-dev 2008-03-08 11:14:05 UTC
# cat /var/tmp/portage/gnustep-base/gnustep-base-1.14.1/temp/scanelf-execstack.log
RWX --- --- image/usr/GNUstep/System/Library/Libraries/libgnustep-base.so.1.14.1
RWX --- --- work/gnustep-base-1.14.1/Source/obj/libgnustep-base.so.1.14.1
Comment 2 Bernard Cafarelli gentoo-dev 2008-06-30 13:33:14 UTC
Looks like it's fixed in gnustep-base-1.16.1:
scanelf -e /usr/GNUstep/System/Library/Libraries/libgnustep-base.so.1.16.1 
 TYPE   STK/REL/PTL FILE 
ET_DYN RW- R-- RW- /usr/GNUstep/System/Library/Libraries/libgnustep-base.so.1.16.1 

with USE=gcc-libffi enabled and disabled, on amd64
Comment 3 Bernard Cafarelli gentoo-dev 2008-09-15 15:21:48 UTC
I'll close after 1.16.1 is stable (unless problem reappears of course)
Comment 4 Bernard Cafarelli gentoo-dev 2008-11-26 15:48:35 UTC
OK, works with 1.16.1