QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/guile-1.6.7/temp/scanelf-execstack.log RWX --- --- usr/lib/libqthreads.so.12.3.0 /var/tmp/portage/guile-1.6.7/temp/scanelf-execstack.log: !WX --- --- work/guile-1.6.7/qt/.libs/qtmds.o RWX --- --- work/guile-1.6.7/qt/.libs/libqthreads.so.12.3.0 !WX --- --- work/guile-1.6.7/qt/qtmds.o RWX --- --- image/usr/lib/libqthreads.so.12.3.0 Portage 2.1_pre7-r3 (default-linux/x86/2006.0, gcc-3.4.5, glibc-2.4-r1, 2.6.15-gentoo-r5 i686) ================================================================= System uname: 2.6.15-gentoo-r5 i686 Gentoo Base System version 1.6.14 dev-lang/python: 2.4.2 sys-apps/sandbox: 1.2.12 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=i686 -O2 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/splash /etc/terminfo /etc/env.d" CXXFLAGS="-march=i686 -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" MAKEOPTS="" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 X acpi alsa apache2 apm applet arts audiofile automount avi berkdb bitmap-fonts bootsplash bzip2 cairo calendar canna cdr cli crypt ctype cups dba dio directfb dnd doc dri dvd eds elibc_glibc emboss encode escreen esd ethereal examples exif expat fam fastbuild font-server fontconfig foomaticdb force-cgi-redirect fortran freetts freewnn ftp gb gcc-libffi gcj gd gdbm gif gimpprint glut glx gmp gnome gnome-print gnustep gphoto2 gpm gstreamer gtk gtk2 gtkhtml guile idn imlib insecure-savers ipv6 isdnlog jabber java javascript jpeg kde kernel_linux lcms lesstif libg++ libwww lua mad memlimit mikmod mng mono motif mouse mozilla mp3 mpeg mule ncurses nls nptl nptlonly nsplugin oav offensive ogg opengl oss pam pcre pdf pdflib perl plotutils png posix postgres pppd python qt quicktime readline samba scanner sdk sdl session simplexml slang soap sockets spell spl ssl tcltk tcpd threads tiff tokenizer truetype truetype-fonts type1-fonts udev unicode userland_GNU verbose vorbis xemacs xfs xft xine xml xml2 xmms xprint xscreensaver xsl xv zlib input_devices_keyboard input_devices_mouse video_cards_ati" Unset: ASFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTDIR_OVERLAY I observed this QA Notice while reviewing my emerge.log. Since I hadn't observed any bug, I reduced the Priority by one step to P3.
I have the same problem, i think: <quote> QA Notice: the following files contain executable stacks Files with executable stacks will not work properly (or at all!) on some architectures/operating systems. A bug should be filed at http://bugs.gentoo.org/ to make sure the file is fixed. For more information, see http://hardened.gentoo.org/gnu-stack.xml Please include this file in your report: /var/tmp/portage/guile-1.6.7/temp/scanelf-execstack.log RWX --- --- usr/lib/libqthreads.so.12.3.0 !!! ERROR: dev-util/guile-1.6.7 failed. Call stack: misc-functions.sh, line 407: Called install_qa_check misc-functions.sh, line 164: Called die !!! Aborting due to QA concerns: execstacks !!! If you need support, post the topmost build error, and the call stack if relevant. !!! install_qa_check failed; exiting. </quote> emerge --info: <quote> Portage 2.1.1_pre5 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.3.6-r4, 2.6.16-hardened-r10 i686) ================================================================= System uname: 2.6.16-hardened-r10 i686 Pentium II (Klamath) Gentoo Base System version 1.12.4 Last Sync: Sat, 16 Sep 2006 01:50:01 +0000 ccache version 2.3 [enabled] app-admin/eselect-compiler: [Not Present] dev-java/java-config: 1.2.11-r1 dev-lang/python: 2.4.3-r1 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: 2.3 dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r3 sys-devel/gcc-config: 1.3.13-r3 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r5 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium2 -O3 -pipe -fomit-frame-pointer -mno-tls-direct-seg-refs" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/" CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo" CXXFLAGS="-march=pentium2 -O3 -pipe -fomit-frame-pointer -mno-tls-direct-seg-refs" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig buildpkg ccache collision-protect distlocks fixpackages parallel-fetch sandbox sfperms strict stricter test userfetch userpriv usersandbox" GENTOO_MIRRORS="http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ http://gentoo.inode.at/" LC_ALL="en_US.UTF-8" LINGUAS="" MAKEOPTS="-j1 -s" PKGDIR="/usr/portage/packages/pentium2" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.de.gentoo.org/gentoo-portage" USE="x86 acl apache2 bash-completion berkdb bzip2 crypt doc elibc_glibc fastcgi gd gdbm howl idn input_devices_evdev input_devices_keyboard input_devices_mouse java jce jpeg kernel_linux maildir mmx mysql ncurses nls nptl pam pcre perl png postgres python readline ruby samba session sqlite3 ssl svg swig tcpd test tetex threads tiff unicode userland_GNU vhosts video_cards_apm video_cards_ark video_cards_ati video_cards_chips video_cards_cirrus video_cards_cyrix video_cards_dummy video_cards_fbdev video_cards_glint video_cards_i128 video_cards_i740 video_cards_i810 video_cards_imstt video_cards_mga video_cards_neomagic video_cards_nsc video_cards_nv video_cards_rendition video_cards_s3 video_cards_s3virge video_cards_savage video_cards_siliconmotion video_cards_sis video_cards_sisusb video_cards_tdfx video_cards_tga video_cards_trident video_cards_tseng video_cards_v4l video_cards_vesa video_cards_vga video_cards_via video_cards_vmware video_cards_voodoo vorbis xml xml2 zlib" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS </quote>
Oh... i forgot: <quote> chris ~ # cat /var/tmp/portage/guile-1.6.7/temp/scanelf-execstack.log !WX --- --- work/guile-1.6.7/qt/.libs/qtmds.o RWX --- --- work/guile-1.6.7/qt/.libs/libqthreads.so.12.3.0 !WX --- --- work/guile-1.6.7/qt/qtmds.o RWX --- --- image/usr/lib/libqthreads.so.12.3.0 chris ~ # </quote>
Adding "append-flags -Wa,--noexecstack" to the ebuild fixes the problem (tested on x86). According to http://www.gentoo.org/proj/en/hardened/gnu-stack.xml patching the source files would be better, but until then the ebuild-patch should be ok.
Created attachment 100401 [details, diff] Add append-flags -Wa,--noexecstack to the ebuild
is this an issue with newer versions of guile than 1.6.7?
I build 1.6.8 on 4th of april: * QA Notice: The following files contain executable stacks * Files with executable stacks will not work properly (or at all!) * on some architectures/operating systems. A bug should be filed * at http://bugs.gentoo.org/ to make sure the file is fixed. * For more information, see http://hardened.gentoo.org/gnu-stack.xml * Please include this file in your report: * /var/tmp/portage/dev-scheme/guile-1.6.8/temp/scanelf-execstack.log * RWX --- --- usr/lib/libqthreads.so.12.3.1
It's not the same ebuild as in the tree, i will rebuild guile later today or tomorrow to check this again.
*** Bug 188243 has been marked as a duplicate of this bug. ***
When will this be fixed? As there is already a concrete solution how to fix it, this should be easy right?
(In reply to comment #9) > When will this be fixed? As there is already a concrete solution how to fix > it, this should be easy right? What we have is a kludge, the issue seems gone with 1.6.8 anyway... at least I cannot reproduce.
rebuilt it today, got this: * QA Notice: The following files contain executable stacks * Files with executable stacks will not work properly (or at all!) * on some architectures/operating systems. A bug should be filed * at http://bugs.gentoo.org/ to make sure the file is fixed. * For more information, see http://hardened.gentoo.org/gnu-stack.xml * Please include this file in your report: * /var/tmp/portage/dev-scheme/guile-1.6.8/temp/scanelf-execstack.log * RWX --- --- usr/lib/libqthreads.so.12.3.1 chris ~ # grep append /usr/portage/dev-scheme/guile/guile-1.* /usr/portage/dev-scheme/guile/guile-1.6.7.ebuild: use userland_Darwin && append-flags -Dmacosx chris ~ # Does this mean, the proposed fix with append-flags is not in the tree?
(In reply to comment #11) > Does this mean, the proposed fix with append-flags is not in the tree? Yes, the proposed kludge has not been added.
Please reopen if you can reproduce with >=1.8.2
Works for me. Thanks a lot.
