* QA Notice: The following files contain runtime text relocations * Text relocations force the dynamic linker to perform extra * work at startup, waste system resources, and may pose a security * risk. On some architectures, the code may not even function * properly, if at all. * For more information, see http://hardened.gentoo.org/pic-fix-guide.xml * Please include the following list of files in your report: * TEXTREL usr/lib/php5.3/apache2/libphp5.so * ERROR: dev-lang/php-5.3.5 failed: * Aborting due to QA concerns: textrels, $ emerge --info =dev-lang/php-5.3.5 Portage 2.2.0_alpha19 (default/linux/x86/10.0/desktop, gcc-4.4.3, glibc-2.11.2-r3, 2.6.32-gentoo-r7 i686) ================================================================= System Settings ================================================================= System uname: Linux-2.6.32-gentoo-r7-i686-Intel-R-_Pentium-R-_4_CPU_3.00GHz-with-gentoo-1.12.14 Timestamp of tree: Sat, 12 Feb 2011 00:30:01 +0000 ccache version 2.4 [enabled] app-shells/bash: 4.1_p9 dev-java/java-config: 2.1.11-r3 dev-lang/python: 2.6.6-r1, 3.1.2-r4 dev-util/ccache: 2.4-r9 dev-util/cmake: 2.8.1-r2 sys-apps/baselayout: 1.12.14-r1 sys-apps/sandbox: 2.4 sys-devel/autoconf: 2.13, 2.65-r1 sys-devel/automake: 1.8.5-r4, 1.9.6-r3, 1.10.3, 1.11.1 sys-devel/binutils: 2.20.1-r1 sys-devel/gcc: 4.3.4, 4.4.3-r2 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.10 sys-devel/make: 3.81-r2 virtual/os-headers: 2.6.30-r1 (sys-kernel/linux-headers) Repositories: gentoo fredden_drpbx ACCEPT_KEYWORDS="x86" ACCEPT_LICENSE="* -@EULA googleearth skype-eula AdobeFlash-10.1" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=i686 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-O2 -march=i686 -pipe" DISTDIR="/usr/portage/distfiles" EMERGE_DEFAULT_OPTS="--keep-going" FEATURES="assume-digests binpkg-logs ccache collision-protect distlocks fixlafiles fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict stricter test unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync" FFLAGS="" GENTOO_MIRRORS="http://distfiles.gentoo.org" LANG="en_NZ.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="en_GB" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/home/dan/Dropbox/gentoo-overlay" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="X a52 aac acl acpi alsa apache2 bash-completion berkdb bluetooth branding bzip2 cairo cdda cddb cdparanoia cdr cli consolekit cracklib crypt cups cvs cxx dbus dri dts dvd dvdr dvdread emboss encode exif fam ffmpeg firefox flac fortran fortune gd gdbm gdu geoip gif gnome gnome-keyring gnutls gphoto2 gpm gtk gtk2 iconv imap ipv6 jabber jpeg jpeg2k lcms ldap libnotify libwww mad mikmod mng modules mono mp3 mp4 mpeg mplayer msn mtp mudflap nautilus ncurses nls nptl nptlonly nsplugin ogg opengl openmp pam pango pcre pda pdf perl png policykit posix ppds pppd python qt3support qt4 readline sdl session sound spell sqlite sqlite3 ssl startup-notification svg sysfs tcpd theora tiff truetype udev unicode usb v4l vim vim-syntax vorbis wifi win32codecs wmf x264 x86 xcb xine xinerama xml xorg xulrunner xv xvid xvmc zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, MAKEOPTS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Any chance of a build log ?
Created attachment 262389 [details] Build log for dev-lang/php-5.3.5 (compressed as otherwise too big for bugzilla)
Recent hardened kernels have a feature to block TEXTRELs at runtime, so this has the potential to kill web servers without FEATURES="stricter". I think it may only affect x86, though. Bug 344031 was the first bad case of this.
Sorry for taking so long to look into this. It seems like this was fixed in 5.3.6 tho, as emerging php with FEATURES="stricter" no longer produces any errors.
Created attachment 274853 [details] emerge --info & build.log for v5.3.6 I still get a TEXTREL in v5.3.6.
Still present in php-5.3.18.
*** Bug 461018 has been marked as a duplicate of this bug. ***
The reason this happens is that php has the USE=pic flag that was earlier used when we allowed bundled extensions to be built as shared objects. This is no longer the case, and only affects mod_php (possibly also embed, but may not be any TEXTREL issues there, or that it would depend on what USE flags is enabled.) The pic USE flag does not really make sense anymore so upcoming bumps will just enable pic on the few shared objects that are built.
Fixed in CVS. Pic should now be enabled unconditionally.
