Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 128075 - app-office/openoffice-2.0.1-r1 fails to compile with hardened system (stack smashing attack in function parseResource)
Summary: app-office/openoffice-2.0.1-r1 fails to compile with hardened system (stack s...
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: Gentoo Office Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-03-29 22:39 UTC by Marcel Meckel
Modified: 2006-04-19 05:00 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marcel Meckel 2006-03-29 22:39:21 UTC
# emerge -pv openoffice gcc glibc

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild     U ] app-office/openoffice-2.0.1-r1 [2.0.0] -binfilter -eds -gnome -gtk +java +kde -ldap -mozilla -xml2 0 kB
[ebuild   R   ] sys-devel/gcc-3.4.5-r1  (-altivec) -bootstrap -boundschecking -build -doc -fortran -gcj +gtk -hardened -ip28 (-multilib) -multislot (-n32) (-n64) +nls -nocxx -nopie -nossp -objc -vanilla 0 kB
[ebuild   R   ] sys-libs/glibc-2.3.5-r2  -build -erandom -glibc-compat20 -glibc-omitfp +hardened -linuxthreads-tls (-multilib) +nls -nptl -nptlonly -pic -profile (-selinux) -userlocales 15,628 kB

Total size of downloads: 15,628 kB



# gcc-config -l
 [1] i686-pc-linux-gnu-3.3.6
 [2] i686-pc-linux-gnu-3.3.6-hardened
 [3] i686-pc-linux-gnu-3.3.6-hardenednopie
 [4] i686-pc-linux-gnu-3.3.6-hardenednopiessp
 [5] i686-pc-linux-gnu-3.3.6-hardenednossp
 [6] i686-pc-linux-gnu-3.4.5
 [7] i686-pc-linux-gnu-3.4.5-hardened *
 [8] i686-pc-linux-gnu-3.4.5-hardenednopie
 [9] i686-pc-linux-gnu-3.4.5-hardenednopiessp
 [10] i686-pc-linux-gnu-3.4.5-hardenednossp



genrb: stack smashing attack in function parseResource()
make[2]: *** [../data/out/build/icudt26l_root.res] Aborted
make[2]: Leaving directory `/var/tmp/portage/openoffice-2.0.1-r1/work/ooo-build-2.0.1.3/build/ooa680-m1/icu/unxlngi6.pro/misc/build/icu/source/data'
make[1]: *** [all-recursive] Error 2
make[1]: Leaving directory `/var/tmp/portage/openoffice-2.0.1-r1/work/ooo-build-2.0.1.3/build/ooa680-m1/icu/unxlngi6.pro/misc/build/icu/source'
dmake:  Error code 2, while making './unxlngi6.pro/misc/build/so_built_so_icu'
'---* tg_merge.mk *---'

ERROR: Error 65280 occurred while making /var/tmp/portage/openoffice-2.0.1-r1/work/ooo-build-2.0.1.3/build/ooa680-m1/icu
make: *** [stamp/build] Fehler 1


# emerge info
Portage 2.0.54 (default-linux/x86/2005.0, gcc-3.4.5-hardened, glibc-2.3.5-r2, 2.6.14-hardened-r5 i686)
=================================================================
System uname: 2.6.14-hardened-r5 i686 AMD Athlon(tm) XP 1700+
Gentoo Base System version 1.6.14
ccache version 2.3 [disabled]
dev-lang/python:     2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo"
LANG="de_DE@euro"
LINGUAS="de"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 3dnow 3dnowext X a52 aac aalib acpi acpi4linux alsa audiofile avi bash-completion bitmap-fonts browserplugin bzip2 bzlib cdparanoia cdr codecs crypt cups devfs26 divx4linux dnd dri dts dv dvb dvd dvdr dvdread eds emboss encode exif expat faac faad fam fame ffmpeg flac foomaticdb freetype ftp gd geoip ggi gif glut gpm gstreamer gtk gtk2 hardened iconv icq idn imagemagick imap imlib irda java jpeg kde lcms libcaca libg++ libgd libwww lzo mad mailbox maildir mbox md5sum mime mjpeg mmx mmx2 mmxext mng mozilla mp3 mpeg mpeg4 mplayer ncurses network nls nocd nsplugin nvidia ogg oggvorbis ooo-kde openal opengl oscar oss pam pcre pdf pdflib perl php png posix procmail qt quicktime readline real recode rtc sdl sse ssl svg tcltk tcpd tga theora tiff transcode truetype truetype-fonts type1 type1-fonts udev usb uudeview v4l v4l2 vcdimager vhosts virus-scan vorbis win32codecs xine xml2 xmms xprint xv xvid xvmc yv12 zlib linguas_de userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LC_ALL, LDFLAGS
Comment 1 Kevin F. Quinn (RETIRED) gentoo-dev 2006-03-30 09:22:49 UTC
hmm; stack protection is filtered by the openoffice ebuild; for some reason that filtering is failing for you.

Can you check further back in your build log, see if '-fno-stack-protector' is present on gcc commands?
Comment 2 Andreas Proschofsky (RETIRED) gentoo-dev 2006-04-19 05:00:31 UTC
Please reopen if you come up with the requested info