Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 116103 - >=dev-libs/libffi-3.4.1-r1 contains executable stacks
Summary: >=dev-libs/libffi-3.4.1-r1 contains executable stacks
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL: http://www.gentoo.org/proj/en/hardene...
Whiteboard:
Keywords:
: 199541 (view as bug list)
Depends on: 163724
Blocks:
  Show dependency tree
 
Reported: 2005-12-19 15:38 UTC by Petteri Räty (RETIRED)
Modified: 2008-02-28 10:23 UTC (History)
7 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Petteri Räty (RETIRED) gentoo-dev 2005-12-19 15:38:52 UTC
QA Notice: the following files contain executable stacks
 Files with executable stacks will not work properly (or at all!)
 on some architectures/operating systems.  A bug should be filed
 at http://bugs.gentoo.org/ to make sure the file is fixed.
RWX --- --- usr/lib/libffi/libffi.so.3.0.0

Turn on FEATURES="stricter" using the latest portage in the tree.
See http://www.gentoo.org/proj/en/hardened/gnu-stack.xml for help in fixing.

The problem is in at least 3.4.1-r1 and 3.4.3
Comment 1 Jakub Moc (RETIRED) gentoo-dev 2006-01-08 01:37:50 UTC
This would be best punted from portage whenever possible. Duplicating parts of gcc ebuild with a whacky keywording scheme that makes it impossible to punt any version is not one of the greatest things in portage...
Comment 2 Bernard Cafarelli gentoo-dev 2007-09-10 21:32:07 UTC
Last gnustep packages depending on dev-libs/libffi have been removed from portage... So for gnustep, this can be removed from portage

However some packages (java and scheme for example) still depend on it!
Comment 3 Bernard Cafarelli gentoo-dev 2007-09-10 21:48:14 UTC
So anyone interested in this package?
Comment 4 Marijn Schouten (RETIRED) gentoo-dev 2007-09-11 09:09:41 UTC
right, it is unmaintained now. I don't know why this should be but as long as there is no alternative there are packages which need this. Actually I need version 4 and am abusing g-wrap for that purpose as it provides a bundled one. See also bug 163724.
Comment 5 Fabian Groffen gentoo-dev 2007-11-20 20:51:48 UTC
Not sure what the status of gcc is with regard to USE=libffi, but recently the GNUstep team has released a libffi-4.1.2 or something close to that.  I guess that one completely won't work with hardened as gcc-4 is still masked there.
Comment 6 David Leverton 2007-11-20 21:24:27 UTC
(In reply to comment #5)
> Not sure what the status of gcc is with regard to USE=libffi

I'm currently testing a patch for this, per discussion between vapier and peper on IRC yesterday, and hopefully will submit it later today.
Comment 7 Jakub Moc (RETIRED) gentoo-dev 2008-02-28 10:14:37 UTC
*** Bug 199541 has been marked as a duplicate of this bug. ***
Comment 8 Jakub Moc (RETIRED) gentoo-dev 2008-02-28 10:23:28 UTC
To be removed, nothing new to see here.