gcc -std=c99 -m32 -Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu -Wl,--sort-common -nostdlib -shared lsb-build-i386/libc_main.o -o lsb-build-i386/libc_main.so \ -Wl,--version-script,/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/stub_libs/libc_main.Version \ -Wl,-soname,`grep "libc_main " /var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/stub_libs/LibNameMap.txt | cut -f2 -d' '` lsb-build-i386/libc_main.o: In function `__sprintf_chk': libc_main.c:(.text+0x20): undefined reference to `__stack_chk_fail_local' lsb-build-i386/libc_main.o: In function `__stack_chk_fail': libc_main.c:(.text+0x60): undefined reference to `__stack_chk_fail_local' lsb-build-i386/libc_main.o: In function `_Exit': libc_main.c:(.text+0xa0): undefined reference to `__stack_chk_fail_local' lsb-build-i386/libc_main.o: In function `_IO_feof': libc_main.c:(.text+0xe0): undefined reference to `__stack_chk_fail_local' lsb-build-i386/libc_main.o: In function `_IO_getc': libc_main.c:(.text+0x120): undefined reference to `__stack_chk_fail_local' lsb-build-i386/libc_main.o:libc_main.c:(.text+0x160): more undefined references to `__stack_chk_fail_local' follow /usr/lib/gcc/x86_64-pc-linux-gnu/4.5.2/../../../../x86_64-pc-linux-gnu/bin/ld: lsb-build-i386/libc_main.so: hidden symbol `__stack_chk_fail_local' isn't defined /usr/lib/gcc/x86_64-pc-linux-gnu/4.5.2/../../../../x86_64-pc-linux-gnu/bin/ld: final link failed: Nonrepresentable section on output collect2: ld returned 1 exit status make: *** [lsb-build-i386/libc_main.so] Error 1 rm lsb-build-i386/libc_main.o emake failed * ERROR: www-plugins/nspluginwrapper-1.4.0-r1 failed (compile phase): * emake failed * * Call stack: * ebuild.sh, line 56: Called src_compile * environment, line 2548: Called die * The specific snippet of code: * emake LDFLAGS_32="-m32 ${LDFLAGS}" || die "emake failed" * * If you need support, post the output of 'emerge --info =www-plugins/nspluginwrapper-1.4.0-r1', * the complete build log and the output of 'emerge -pqv =www-plugins/nspluginwrapper-1.4.0-r1'. * The complete build log is located at '/var/log/portage/www-plugins:nspluginwrapper-1.4.0-r1:20110526-085542.log'. * The ebuild environment file is located at '/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/temp/environment'. * S: '/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0' emerge --info: Portage 2.2.0_alpha36 (hardened/linux/amd64, gcc-4.5.2, glibc-2.13-r2, 2.6.39-gentoo x86_64) ================================================================= System uname: Linux-2.6.39-gentoo-x86_64-AMD_Phenom-tm-_II_X4_945_Processor-with-gentoo-2.0.2 Timestamp of tree: Thu, 26 May 2011 00:45:01 +0000 app-shells/bash: 4.2_p10 dev-java/java-config: 2.1.11-r3 dev-lang/python: 2.7.1-r1, 3.1.3-r1, 3.2 dev-util/cmake: 2.8.4-r1 sys-apps/baselayout: 2.0.2 sys-apps/openrc: 0.8.2-r1 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.10.3, 1.11.1-r1 sys-devel/binutils: 2.21 sys-devel/gcc: 4.5.2 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82 sys-kernel/linux-headers: 2.6.38 (virtual/os-headers) sys-libs/glibc: 2.13-r2 Repositories: gentoo jesper_local x11 java-overlay xen sugar sunrise nx science mpd openrc wacfg stoile_overlay flameeyes-overlay lisp gamerlay-stable lordvan Installed sets: ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA googleearth AdobeFlash-10 AdobeFlash-10.1 PUEL" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=amdfam10 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.0/conf /usr/share/openvpn/easy-rsa /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=amdfam10 -O2 -pipe" DISTDIR="/mnt/space/gentoo/distfiles" EMERGE_DEFAULT_OPTS="--keep-going --alphabetical --binpkg-respect-use y --load-average=5 --with-bdeps y" FEATURES="assume-digests binpkg-logs buildpkg collision-protect distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox" FFLAGS="" GENTOO_MIRRORS="http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo http://gentoo.inode.at/ http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" INSTALL_MASK="*.la" LANG="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu -Wl,--sort-common" LINGUAS="en" MAKEOPTS="-j4 -l5 -s" PKGDIR="/mnt/space/gentoo/packages/jesper" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage /mnt/space/gentoo/layman/x11 /mnt/space/gentoo/layman/java-overlay /mnt/space/gentoo/layman/xen /mnt/space/gentoo/layman/sugar /mnt/space/gentoo/layman/sunrise /mnt/space/gentoo/layman/nx /mnt/space/gentoo/layman/science /mnt/space/gentoo/layman/mpd /mnt/space/gentoo/layman/openrc /mnt/space/gentoo/layman/wacfg /mnt/space/gentoo/layman/stoile /mnt/space/gentoo/layman/flameeyes-overlay /mnt/space/gentoo/layman/lisp /mnt/space/gentoo/layman/gamerlay /var/lib/layman/lordvan" SYNC="rsync://rsync.de.gentoo.org/gentoo-portage" USE="3dnow 3dnowext X a52 aac aalib acl acpi amd64 amr apm audiofile avahi berkdb branding bzip2 cairo caps cli consolekit cracklib crypt cups curl cxx dbus dga dirac dri dts dvb dvd encode exif fam ffmpeg flac gd gdbm gif gimp gmp gnome gnome-keyring gnuplot gphoto2 graphviz gstreamer gtk hardened iconv idn imagemagick imap ipv6 jpeg justify lame latex lcms libnotify lua lzo mad matroska mikmod mmx mng modules mp3 mp4 mpeg mudflap multilib musepack nautilus ncurses nls nntp nptl nptlonly offensive ogg openal opengl openmp pam pcre pdf perl png policykit pppd pulseaudio python quicktime readline schroedinger sdl session smp spell sqlite sqlite3 sse sse2 sse3 sse4a ssl startup-notification svg sysfs syslog taglib tcpd theora threads tiff truetype unicode urandom usb v4l2 vim-syntax vorbis vpx wmf x264 xattr xcb xml xorg xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="braindump flow karbon kexi kpresenter krita tables words" CAMERAS="casio casio_qv" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" DVB_CARDS="usb-dib0700" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" PHP_TARGETS="php5-3" QEMU_SOFTMMU_TARGETS="i386 x86_64" RUBY_TARGETS="ruby18" SANE_BACKENDS="genesys" USERLAND="GNU" VIDEO_CARDS="radeon r600" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
(In reply to comment #0) The same version fails here (amd64) but with different errors gcc -std=c99 -m32 -march=native -O2 -pipe -I/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/headers -nostdinc -fno-builtin -I. -I/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/headers -c /var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/stub_libs/libgobject-2.0.c -o lsb-build-i386/libgobject-2.0.o Assembler messages: Fatal error: can't create lsb-build-i386/libgtk-x11-2.0.o: No such file or directory ... gcc -std=c99 -m32 -march=native -O2 -pipe -I/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/headers -nostdinc -fno-builtin -I. -I/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/headers -c /var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/stub_libs/libXext.c -o lsb-build-i386/libXext.o Assembler messages: Fatal error: can't create lsb-build-i386/libgdk-x11-2.0.o: No such file or directory ... Assembler messages: Fatal error: can't create lsb-build-i386/libgthread-2.0.o: No such file or directory Assembler messages: Fatal error: can't create lsb-build-i386/libgobject-2.0.o: No such file or directory and other similar messages
Confirming failure as described in the first post. My emerge --info: Portage 2.2.0_alpha37 (hardened/linux/amd64/desktop, gcc-4.5.2, glibc-2.13-r2, 2.6.38-hardened-r5 x86_64) ================================================================= System uname: Linux-2.6.38-hardened-r5-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T7500_@_2.20GHz-with-gentoo-2.0.2 Timestamp of tree: Sun, 29 May 2011 03:15:01 +0000 app-shells/bash: 4.2_p10 dev-java/java-config: 2.1.11-r3 dev-lang/python: 2.7.1-r1, 3.2 dev-util/cmake: 2.8.4-r1 sys-apps/baselayout: 2.0.2 sys-apps/openrc: 0.8.2-r1 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.10.3, 1.11.1-r1 sys-devel/binutils: 2.21 sys-devel/gcc: 4.5.2 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82 sys-kernel/linux-headers: 2.6.38 (virtual/os-headers) sys-libs/glibc: 2.13-r2 Repositories: gentoo sunrise local-repo Installed sets: @system ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-mtune=generic -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.0/conf /usr/share/openvpn/easy-rsa /usr/share/themes/oxygen-gtk/gtk-2.0 /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-mtune=generic -O2 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fail-clean fixlafiles fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" GENTOO_MIRRORS="http://gentoo.ynet.sk/pub " LC_ALL="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--sort-common -Wl,--as-needed" LINGUAS="en us en_US sk cs" MAKEOPTS="-j3 -s" PKGDIR="/usr/src/binpkg" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/var/portage" PORTDIR_OVERLAY="/var/lib/layman/sunrise /usr/local/portage" SYNC="rsync://rsync.sk.gentoo.org/gentoo-portage" USE="7zip R X Xaw3d a52 aac acl acpi alsa amd64 apache2 asf avahi bash-completion battery berkdb bluetooth boost branding bzip2 cairo caps cdr cli consolekit cracklib crypt cups curl cvs cxx dbus dc1394 doc dri dts dv dvb dvd dvdr dvdread emboss encode esd examples exif expat fam fame fbcon ffmpeg firefox flac gdbm gdu gif git gmp gnome gpm graphviz gstreamer gtk hardened iconv icu ieee1394 imagemagick imlib ipv6 java java6 jpeg jpeg2k justify kde kdehiddenvisibility kerberos khtmlhandbook kpathsea lame lcms ldap libnotify lzma mad matroska mikmod mmap mmx mng modplug modules mp3 mp4 mpeg mudflap multilib mysql nautilus ncurses nls nptl nptlonly nsplugin ogg ogm openal openexr opengl openmp pam pango pcmcia pcre pdf perl php pic png policykit ppds pppd private-headers pulseaudio python qt qt3support qt4 quicktime readline samba schroedinger sdl semantic-desktop session sound speex spell sqlite sqlite3 sse sse2 ssl startup-notification subversion svg sysfs system-sqlite tcpd theora threads tiff timidity truetype udev unicode urandom usb utempter v4l v4l2 vorbis webkit wicd wifi wma x264 xattr xcb xcomposite xine xinerama xml xorg xpm xprint xulrunner xv xvid zeroconf zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias auth_basic auth_digest authn_default authn_file authn_anon authn_dbd authn_dbm authz_default authz_groupfile authz_host authz_owner authz_user authz_dbm" APACHE2_MPMS="prefork" CALLIGRA_FEATURES="braindump flow karbon kexi kpresenter krita tables words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" DVB_CARDS="dibusb-usb1 dibusb-usb2" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev keyboard mouse synaptics vmmouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en us en_US sk cs" LIRC_DEVICES="devinput" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="vesa fbdev intel vmware" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
It seems www-plugins/nspluginwrapper-1.4.0-r1 is incompatible with SSP. While I experience the same issue with the default hardened GCC, no linking issues surface with the vanilla or hardenednossp compilers. I've set: > GCC_SPECS="/usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/hardenednossp.specs" in /etc/portage/env/www-plugins/nspluginwrapper to allow upgrading to 1.4.0-r1 with what hardening is possible.
This appears to be specific to hardened, reassigning bug to hardened team for recommendations.
(In reply to comment #4) > This appears to be specific to hardened, reassigning bug to hardened team for > recommendations. Perhaps my error is different. If so I can open a new bug. My system is not hardened. I can submit emerge --info either here or to a new bug as requested. My system ~amd64. build.log lines 87-89 follow gcc -std=c99 -m32 -march=native -O2 -pipe -I/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/headers -nostdinc -fno-builtin -I. -I/var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/headers -c /var/tmp/portage/www-plugins/nspluginwrapper-1.4.0-r1/work/nspluginwrapper-1.4.0/lsb-build/stub_libs/libgdk-x11-2.0.c -o lsb-build-i386/libgdk-x11-2.0.o Assembler messages: Fatal error: can't create lsb-build-i386/libgtk-x11-2.0.o: No such file or directory Several other similar errors appear.
nspluginwrapper also fails to build on my hardened system; I will attach my environment info momentarily. gcc -std=c99 -Wl,-O1 -Wl,--as-needed -m32 -Wl,-O1 -Wl,--as-needed -shared -o libxpcom.so -m32 -Wl,-O1 -Wl,--as-needed libxpcom-libxpcom.o libxpcom-debug.o -Wl,-soname,libxpcom.so /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/libgcc.a when searching for -lgcc /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/libgcc.a when searching for -lgcc /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: cannot find -lgcc collect2: ld returned 1 exit status make: *** [libxpcom.so] Error 1 make: *** Waiting for unfinished jobs.... /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/libsupc++.a when searching for -lsupc++ /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/libsupc++.a when searching for -lsupc++ /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: cannot find -lsupc++ collect2: ld returned 1 exit status make: *** [npviewer.bin] Error 1 rm test-rpc-types-server.o test-rpc-nested-1-client.o test-rpc-nested-2-client.o test-rpc-concurrent-client.o test-rpc-common-server.o test-rpc-common-client.o test-rpc-nested-2-server.o rpc-client.o test-rpc-types-client.o test-rpc-concurrent-server.o rpc-server.o debug-client.o test-rpc-nested-1-server.o debug-server.o emake failed
Created attachment 275517 [details] Build log and supporting system environment documentation
Portage 2.1.10 (hardened/linux/amd64, gcc-4.5.2, glibc-2.13-r2, 2.6.38-hardened-r6-GreatSula x86_64) ================================================================= System Settings ================================================================= System uname: Linux-2.6.38-hardened-r6-GreatSula-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T6400_@_2.00GHz-with-gentoo-2.0.2 Timestamp of tree: Tue, 07 Jun 2011 05:15:01 +0000 distcc 3.1 x86_64-pc-linux-gnu [enabled] app-shells/bash: 4.2_p10 dev-java/java-config: 2.1.11-r3 dev-lang/python: 2.7.1-r1, 3.2 dev-util/cmake: 2.8.4-r1 sys-apps/baselayout: 2.0.2 sys-apps/openrc: 0.8.2-r1 sys-apps/sandbox: 2.5 sys-devel/autoconf: 2.13, 2.68 sys-devel/automake: 1.9.6-r3, 1.10.3, 1.11.1-r1 sys-devel/binutils: 2.21 sys-devel/gcc: 4.5.2 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.4-r1 sys-devel/make: 3.82 sys-kernel/linux-headers: 2.6.38 (virtual/os-headers) sys-libs/glibc: 2.13-r2 ABI="amd64" ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" ACCEPT_PROPERTIES="*" ARCH="amd64" ASFLAGS_x86="--32" AUTOCLEAN="yes" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -O2 -pipe -march=native -ggdb" CFLAGS_x86="-m32" CHOST="x86_64-pc-linux-gnu" CHOST_amd64="x86_64-pc-linux-gnu" CHOST_x86="i686-pc-linux-gnu" CLEAN_DELAY="5" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" COLLISION_IGNORE="/lib/modules" COLORTERM="gnome-terminal" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/maven-bin-3.0/conf /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/splash /etc/terminfo" CVS_RSH="ssh" CXXFLAGS="-O2 -pipe -O2 -pipe -march=native -ggdb" DCCC_PATH="/usr/lib64/distcc/bin" DEFAULT_ABI="amd64" DISTCC_LOG="/var/log/distccd.log" DISTCC_VERBOSE="0" DISTDIR="/usr/portage/distfiles" ELIBC="glibc" EMERGE_DEFAULT_OPTS="-v --keep-going --ask --ask-enter-invalid" EMERGE_WARNING_DELAY="10" EPREFIX="" EROOT="/" FCFLAGS="" FEATURES="assume-digests binpkg-logs candy distcc distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms splitdebug strict unknown-features-warn unmerge-logs unmerge-orphans userfetch" FFLAGS="" FLTK_DOCDIR="/usr/share/doc/fltk-1.3.0_rc6/html" GCC_SPECS="" GDK_USE_XFT="1" GENTOO_MIRRORS="http://www.gtlib.gatech.edu/pub/gentoo rsync://rsync.gtlib.gatech.edu/gentoo ftp://ftp.ucsb.edu/pub/mirrors/linux/gentoo/ ftp://mirror.its.uidaho.edu/gentoo/ http://gentoo.cs.uni.edu/" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" GSETTINGS_BACKEND="gconf" HOME="/root" INFOPATH="/usr/share/info:/usr/share/binutils-data/x86_64-pc-linux-gnu/2.21/info:/usr/share/gcc-data/x86_64-pc-linux-gnu/4.5.2/info:/usr/share/info/emacs-23" INPUT_DEVICES="evdev keyboard mouse joystick synaptics" JAVAC="/etc/java-config-2/current-system-vm/bin/javac" JAVACC_HOME="/usr/share/javacc/" JAVA_HOME="/etc/java-config-2/current-system-vm" JDK_HOME="/etc/java-config-2/current-system-vm" KERNEL="linux" LANG="en_US.utf8" LC_ALL="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LDFLAGS_x86="-m elf_i386" LESS="-R -M --shift 5" LESSOPEN="|lesspipe.sh %s" LIBDIR_amd64="lib64" LIBDIR_amd64_fbsd="lib64" LIBDIR_ppc="lib32" LIBDIR_ppc64="lib64" LIBDIR_s390="lib32" LIBDIR_s390x="lib64" LIBDIR_sparc32="lib32" LIBDIR_sparc64="lib64" LIBDIR_x86="lib32" LIBDIR_x86_fbsd="lib32" LIRC_DEVICES="devinput" LOGNAME="root" LS_COLORS=".." MAIL="/var/mail/root" MAKEOPTS="-j5" MULTILIB_ABIS="amd64 x86" MULTILIB_STRICT_DENY="64-bit.*shared object" MULTILIB_STRICT_DIRS="/lib32 /lib /usr/lib32 /usr/lib /usr/kde/*/lib32 /usr/kde/*/lib /usr/qt/*/lib32 /usr/qt/*/lib /usr/X11R6/lib32 /usr/X11R6/lib" MULTILIB_STRICT_EXEMPT="(perl5|gcc|gcc-lib|binutils|eclipse-3|debug|portage|udev)" OPENGL_PROFILE="xorg-x11" PAGER="/usr/bin/less" PKGDIR="/usr/portage/packages" PORTAGE_ARCHLIST="ppc sparc64-freebsd ppc-openbsd x86-openbsd ppc64 x86-winnt x86-fbsd ppc-aix alpha arm x86-freebsd s390 amd64 arm-linux x86-macos x64-openbsd ia64-hpux hppa x86-netbsd x86-cygwin amd64-linux ia64-linux x86 sparc-solaris x64-freebsd sparc64-solaris x86-linux x64-macos sparc m68k-mint ia64 mips ppc-macos x86-interix hppa-hpux amd64-fbsd x64-solaris mips-irix m68k sh x86-solaris sparc-fbsd" PORTAGE_BINHOST_CHUNKSIZE="3000" PORTAGE_BIN_PATH="/usr/lib64/portage/bin" PORTAGE_COMPRESS_EXCLUDE_SUFFIXES="css gif htm[l]? jp[e]?g js pdf png" PORTAGE_CONFIGROOT="/" PORTAGE_DEBUG="0" PORTAGE_DEPCACHEDIR="/var/cache/edb/dep" PORTAGE_ELOG_CLASSES="warn error log" PORTAGE_ELOG_MAILFROM="portage@localhost" PORTAGE_ELOG_MAILSUBJECT="[portage] ebuild log for ${PACKAGE} on ${HOST}" PORTAGE_ELOG_MAILURI="root" PORTAGE_ELOG_SYSTEM="save" PORTAGE_FETCH_CHECKSUM_TRY_MIRRORS="5" PORTAGE_FETCH_RESUME_MIN_SIZE="350K" PORTAGE_GID="250" PORTAGE_GPG_SIGNING_COMMAND="gpg --sign --clearsign --yes --default-key "${PORTAGE_GPG_KEY}" --homedir "${PORTAGE_GPG_DIR}" "${FILE}"" PORTAGE_INST_GID="0" PORTAGE_INST_UID="0" PORTAGE_NICENESS="5" PORTAGE_PYM_PATH="/usr/lib64/portage/pym" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_RSYNC_RETRIES="-1" PORTAGE_SANDBOX_COMPAT_LEVEL="16" PORTAGE_SYNC_STALE="30" PORTAGE_TMPDIR="/var/tmp" PORTAGE_VERBOSE="1" PORTAGE_WORKDIR_MODE="0700" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/games /var/lib/layman/gamerlay /var/lib/layman/mozilla /var/lib/layman/multimedia /var/lib/layman/emacs /var/lib/layman/science /var/lib/layman/nx /var/lib/layman/dotnet /var/lib/layman/Spring /usr/local/portage" PRELINK_PATH_MASK="/usr/lib64/klibc:/usr/lib64/libfreebl3.so:/usr/lib64/libnssdbm3.so:/usr/lib64/libsoftokn3.so" PROFILE_ONLY_VARIABLES="ARCH ELIBC KERNEL USERLAND" PWD="/root" PYTHONDONTWRITEBYTECODE="1" RESUMECOMMAND="/usr/bin/wget -c -t 3 -T 60 --passive-ftp -O "${DISTDIR}/${FILE}" "${URI}"" RESUMECOMMAND_RSYNC="rsync -avP "${URI}" "${DISTDIR}/${FILE}"" RESUMECOMMAND_SSH="bash -c "x=\${2#ssh://} ; host=\${x%%/*} ; port=\${host##*:} ; host=\${host%:*} ; [[ \${host} = \${port} ]] && port=22 ; exec rsync --rsh=\"ssh -p\${port}\" -avP \"\${host}:/\${x#*/}\" \"\$1\"" rsync "${DISTDIR}/${FILE}" "${URI}"" ROOT="/" ROOTPATH="/opt/bin:/usr/x86_64-pc-linux-gnu/gcc-bin/4.5.2:/usr/ti-linux-gnu/tigcc-bin/4.1.2:/usr/ti-linux-gnu/bin" RPMDIR="/usr/portage/rpm" RUBY_TARGETS="ruby18" SHELL="/bin/bash" SHLVL="1" STAGE1_USE="hardened multilib nptl nptlonly" STY="17350.pts-0.GreatSula" SYMLINK_LIB="yes" SYNC="rsync://rsync.us.gentoo.org/gentoo-portage" TERM="screen" USE="64bit X aalib acl acpi alsa amd64 apache2 avahi banshee bash-completion battery beagle berkdb bluetooth bzip2 ccache cdb cdda cddax cddb cdr cgi clamav cli cracklib crypt css curl custom-optimization cvs cxx daap dbus device-mapper directfb dlna dmx dri dv dvd emacs espeak fat fbcon fbcondecor fbdev fbsplash ffmpeg flac flash fontconfig ftp fuse gconf gdbm gif gimp git gnome gnome-keyring google-gadgets gpg gpm gtk gzip hardened iconv id3 id3tag java javascript jpeg justify kerberos lame laptop lastfm lastfmradio libcaca lirc logrotate lua lyrics lzma lzo math mbox mime mmx modules mono mp3 mpd mpeg mplayer mudflap multilib musicbrainz mysql nano-syntax nautilus ncurses net netbeans nethack network nfs nls nntp nptl nptlonly nsplugin ntfs odbc ogg openct opengl openmp opensync pam pcre pdf perl php pic pidgin plugins pm-utils pmu png python quicktime rar readline reiser4 reiserfs rss ruby samba screen sdl session sftp slang smartcard smp sockets sqlite sse sse2 ssh ssl subversion svg sysfs syslog system-sqlite tcpd telepathy theora threads udev unicode upnp urandom usb v4l v4l2 vboxwebsrv vlc vorbis wifi xattr xcf xcomposite xinerama xml xorg xpm youtube zeroconf zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="braindump flow karbon kexi kpresenter krita tables words" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev keyboard mouse joystick synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIRC_DEVICES="devinput" NETBEANS_MODULES="apisupport harness ide java nb websvccommon mobility php enterprise profiler ruby identity groovy dlight" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="fbdev vesa intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" USER="root" USERLAND="GNU" USERNAME="root" USE_EXPAND="ALSA_CARDS ALSA_PCM_PLUGINS APACHE2_MODULES APACHE2_MPMS CALLIGRA_FEATURES CAMERAS COLLECTD_PLUGINS CROSSCOMPILE_OPTS DRACUT_MODULES DVB_CARDS ELIBC FCDSL_CARDS FOO2ZJS_DEVICES FRITZCAPI_CARDS GPSD_PROTOCOLS INPUT_DEVICES KERNEL LCD_DEVICES LINGUAS LIRC_DEVICES MISDN_CARDS NETBEANS_MODULES NGINX_MODULES_HTTP NGINX_MODULES_MAIL PHP_TARGETS QEMU_SOFTMMU_TARGETS QEMU_USER_TARGETS RUBY_TARGETS SANE_BACKENDS USERLAND VIDEO_CARDS XFCE_PLUGINS XTABLES_ADDONS" USE_EXPAND_HIDDEN="CROSSCOMPILE_OPTS ELIBC KERNEL USERLAND" USE_ORDER="env:pkg:conf:defaults:pkginternal:env.d" VBOX_APP_HOME="/opt/VirtualBox" VIDEO_CARDS="fbdev vesa intel" VISUAL="/bin/nano" _="/usr/bin/emerge"
It fail when it link the stub libc lib. Patrick do you know way we need the stup-libs libs on 1.4 and not on 1.3? The problem in short is that we build the objects with ssp but we don't use ssp when linking so the symbol don't get linked in the stub libs. We need to link libc_nonshared.a from the stub libs or don't use it.
I think we need to forward port the nspluginwrapper-1.3.0-asneeded.patch which, despite its name, does a lot of manipulation of LDFLAGS and other stuff. Here's what I found: 1) If I do ebuild nspluginwrapper-1.3.0.ebuild clean unpack cd /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work ./configure make I hit -Wl,-soname,`grep "libgcc_s " /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/LibNameMap.txt | cut -f2 -d' '` lsb-build-i386/libgcc_s.o: In function `_Unwind_Backtrace': /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/libgcc_s.c:1: undefined reference to `__stack_chk_fail_local' lsb-build-i386/libgcc_s.o: In function `_Unwind_DeleteException': /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/libgcc_s.c:2: undefined reference to `__stack_chk_fail_local' lsb-build-i386/libgcc_s.o: In function `_Unwind_FindEnclosingFunction': /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/libgcc_s.c:3: undefined reference to `__stack_chk_fail_local' lsb-build-i386/libgcc_s.o: In function `_Unwind_Find_FDE': /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/libgcc_s.c:4: undefined reference to `__stack_chk_fail_local' lsb-build-i386/libgcc_s.o: In function `_Unwind_ForcedUnwind': /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/libgcc_s.c:5: undefined reference to `__stack_chk_fail_local' lsb-build-i386/libgcc_s.o:/var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work/nspluginwrapper-1.3.0/lsb-build/stub_libs/libgcc_s.c:6: more undefined references to `__stack_chk_fail_local' follow /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: lsb-build-i386/libgcc_s.so: hidden symbol `__stack_chk_fail_local' isn't defined /usr/lib/gcc/x86_64-pc-linux-gnu/4.4.5/../../../../x86_64-pc-linux-gnu/bin/ld: final link failed: Nonrepresentable section on output collect2: ld returned 1 exit status make: *** [lsb-build-i386/libgcc_s.so] Error 1 rm lsb-build-i386/libgcc_s.o lsb-build-i386/libc_main.o lsb-build-i386/libc_nonshared.o 2) If however I do ebuild nspluginwrapper-1.3.0.ebuild clean unpack cd /var/tmp/portage/www-plugins/nspluginwrapper-1.3.0/work patch -p 0 < /usr/portage/www-plugins/nspluginwrapper/files/nspluginwrapper-1.3.0-asneeded.patch ./configure make It compiles fine. Don't ask me what precisely in that patch does the trick, but I've got a feeling that's it. I'm going to try to write nspluginwrapper-1.4.0-asneeded.patch but I'm not sure it should be called that.
1.4 don't use the system libs as >=1.3 do so bug #269250 all over again and we hit it with SSP enable this time.
Created attachment 278571 [details, diff] Patch fixing the issue by disabling the stack protector when compiling the stubs I have managed to reduce the issue to a simple patch disabling the SSP when building the stubs for the libraries... yet I think Debian way of solving the issue is better :(
And we bring it back to the maintainer, there is little more Hardened can do for now.
Created attachment 278573 [details, diff] The previous one was reversed Sorry sent the reversed patch, this one fixes it.
Added www-plugins/nspluginwrapper-1.4.4 to the tree with the included patch. Please reopen the bug if this doesn't fix the problem.