Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 21025 - krb5 (Kerberos) wont compile it -fstack-protector
Summary: krb5 (Kerberos) wont compile it -fstack-protector
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Matthew Rickard
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-05-14 15:38 UTC by John Mylchreest (RETIRED)
Modified: 2003-11-17 18:20 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Mylchreest (RETIRED) gentoo-dev 2003-05-14 15:38:50 UTC
Should this strip the flag?

inherit flag-o-matic
filter-flags "-fstack-protector"

??

If theres a fix it would probably be prefered.
this will probably effect all versions of kerberos (emerge -s krb) although i
havnt tried
Comment 1 John Mylchreest (RETIRED) gentoo-dev 2003-05-14 15:55:18 UTC
mip-krb is also effected - if i come across others i shall post here. although havnt tried any others as yet
Comment 2 Matthew Rickard 2003-05-14 17:23:43 UTC
Can you post the error logs showing exactly where this is failing?
Comment 3 John Mylchreest (RETIRED) gentoo-dev 2003-05-14 17:46:29 UTC
make[3]: Entering directory `/var/tmp/portage/mit-krb5-1.2.7/work/krb5-1.2.7/src/lib/rpc/unit-test'
gcc -DKRB5_DNS_LOOKUP_KDC=1 -DKRB5_DNS_LOOKUP_REALM=1 -DKRB5_DNS_LOOKUP=1 -DHAVE_TCL_H=1 -DPOSIX_SIGNALS=1   -I../../../include -I./../../../include -I../../../include/krb5 -I./../../../include/krb5 -I. -mcpu=athlon-mp -O3 -pipe -mmmx -m3dnow -msse -fstack-protector -c client.c
gcc -DKRB5_DNS_LOOKUP_KDC=1 -DKRB5_DNS_LOOKUP_REALM=1 -DKRB5_DNS_LOOKUP=1 -DHAVE_TCL_H=1 -DPOSIX_SIGNALS=1   -I../../../include -I./../../../include -I../../../include/krb5 -I./../../../include/krb5 -I. -mcpu=athlon-mp -O3 -pipe -mmmx -m3dnow -msse -fstack-protector -c rpc_test_clnt.c
gcc -L../../../lib -Wl,-rpath -Wl,/usr/lib -o client client.o rpc_test_clnt.o \
        -lgssrpc -ldyn -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err  -lresolv
/usr/lib/gcc-lib/i686-pc-linux-gnu/3.2.2/../../../../i686-pc-linux-gnu/bin/ld: client: hidden symbol `__stack_smash_handler' in /usr/lib/gcc-lib/i686-pc-linux-gnu/3.2.2/libgcc.a(_stack_smash_handler.oS) is referenced by DSO
collect2: ld returned 1 exit status
make[3]: *** [client] Error 1
make[3]: Leaving directory `/var/tmp/portage/mit-krb5-1.2.7/work/krb5-1.2.7/src/lib/rpc/unit-test'
make[2]: *** [all-recurse] Error 1
make[2]: Leaving directory `/var/tmp/portage/mit-krb5-1.2.7/work/krb5-1.2.7/src/lib/rpc'
make[1]: *** [all-recurse] Error 1
make[1]: Leaving directory `/var/tmp/portage/mit-krb5-1.2.7/work/krb5-1.2.7/src/lib'
make: *** [all-recurse] Error 1
 
!!! ERROR: app-crypt/mit-krb5-1.2.7 failed.
!!! Function src_compile, Line 57, Exitcode 2
!!! (no error message)
Comment 4 Matthew Rickard 2003-05-20 14:14:07 UTC
Can you try this with gcc-3.2.3-r1?  gcc-3.2.2-r3 has been removed from portage in favor of this ebuild.
Comment 5 John Mylchreest (RETIRED) gentoo-dev 2003-05-20 14:59:28 UTC
aye.
exact same error
Comment 6 Matthew Rickard 2003-06-13 11:05:33 UTC
Is your gcc-3.2.1-r1 compiled with -fstack-protector?  If so, can you try compiling gcc itself without -fstack-protector (either filter it or remove it from make.conf temporarily).

Then try emerging this package with your new gcc.
Comment 7 Matthew Rickard 2003-06-13 11:06:43 UTC
That should be gcc-3.2.3-r1 in the previous comment. Oops.
Comment 8 Matthew Rickard 2003-06-20 15:06:08 UTC
Emerging the latest mit-krb5-1.2.8 caused this same bug to pop up for me, however I didn't hit it in 1.2.7.  At least I can replicate it now :)

I'll be taking a closer look at it (and hopefully fixing it) soon.
Comment 9 Matthew Rickard 2003-07-12 20:29:47 UTC
I've narrowed down the problem with this.  When mit-krb5 is built with shared libraries (--enable-shared --disable-static) this error appears.  If it is built static (--disable-shared --enable-static) to build completes successfully.

I don't yet know the cause of this.  Perhaps a temporary solution is to force static linking if -fstack-protector is in CFLAGS?
Comment 10 Matthew Rickard 2003-10-21 16:49:42 UTC
This bug has been sitting around for awhile now...  Has anyone experienced
this problem with the latest gcc and/or the latest hardened-gcc?

I can't seem to replicate it over here anymore.
Comment 11 Matthew Rickard 2003-11-17 18:20:56 UTC
Since there hasn't been any feedback on this in quite some time, and since I can't replicate it, I'm going to assume it is no longer an issue.

Closing this bug for now.