Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 47765 - cyrus-sasl fails with propolice, grSecurity
Summary: cyrus-sasl fails with propolice, grSecurity
Status: RESOLVED WORKSFORME
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Hardened Gentoo
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-04-13 15:53 UTC by Kirk Smith
Modified: 2004-09-08 18:32 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kirk Smith 2004-04-13 15:53:42 UTC 
CyrusSASL will not compile on any of three systems if using GRSecurity and/or propolice (when building the system).

2.1.14 & 2.1.15
-----------------------------------------------------------
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I../include -I../plugins -I/usr/include/mysql -Wall -W -Wall -march=pentium3 -O3 -pipe -fomit-frame-pointer -fstack-protector -Wp,-MD,.deps/dlopen.pp -c dlopen.c  -fPIC -o .libs/dlopen.o
dlopen.c: In function `_sasl_load_plugins':
dlopen.c:385: warning: unused variable `str'
dlopen.c:385: warning: unused variable `tmp'
dlopen.c:385: warning: unused variable `prefix'
dlopen.c:387: warning: unused variable `c'
dlopen.c:388: warning: unused variable `pos'
dlopen.c:389: warning: unused variable `path'
dlopen.c:390: warning: unused variable `position'
dlopen.c:391: warning: unused variable `dp'
dlopen.c:392: warning: unused variable `dir'
dlopen.c: At top level:
dlopen.c:218: warning: `_sasl_plugin_load' defined but not used
dlopen.c:242: warning: `_parse_la' defined but not used
/bin/sh ../libtool --mode=link gcc  -Wall -W -Wall -march=pentium3 -O3 -pipe -fomit-frame-pointer -fstack-protector -L/usr/local/lib -Wl,-rpath,/usr/local/lib  -o libsasl2.la -rpath /usr/lib -version-info 2:14:0 auxprop.lo canonusr.lo checkpw.lo client.lo common.lo config.lo external.lo md5.lo saslutil.lo server.lo seterror.lo dlopen.lo plugin_common.lo -ldl -lresolv  -lresolv
gcc -shared  .libs/auxprop.o .libs/canonusr.o .libs/checkpw.o .libs/client.o .libs/common.o .libs/config.o .libs/external.o .libs/md5.o .libs/saslutil.o .libs/server.o .libs/seterror.o .libs/dlopen.o .libs/plugin_common.o  -L/usr/local/lib -ldl -lresolv  -Wl,-soname -Wl,libsasl2.so.2 -o .libs/libsasl2.so.2.0.14
gcc: .libs/plugin_common.o: No such file or directory
make[2]: *** [libsasl2.la] Error 1
make[2]: Leaving directory `/var/tmp/portage/cyrus-sasl-2.1.14/work/cyrus-sasl-2.1.14/lib'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/var/tmp/portage/cyrus-sasl-2.1.14/work/cyrus-sasl-2.1.14'
make: *** [all-recursive-am] Error 2

!!! ERROR: dev-libs/cyrus-sasl-2.1.14 failed.
!!! Function src_compile, Line 105, Exitcode 2
!!! compile problem
-----------------------------------------------------------

2.1.17
-----------------------------------------------------------
>>> Unpacking cyrus-sasl-2.1.17.tar.gz to /var/tmp/portage/cyrus-sasl-2.1.17/work

 * Cannot find $EPATCH_SOURCE!  Value for $EPATCH_SOURCE is:
 *
 *   /usr/portage/dev-libs/cyrus-sasl/files/cyrus-sasl-2.1.17-db4.patch


!!! ERROR: dev-libs/cyrus-sasl-2.1.17 failed.
!!! Function epatch, Line 182, Exitcode 0
!!! Cannot find $EPATCH_SOURCE!
-----------------------------------------------------------

2.1.18
-----------------------------------------------------------
cd ../.. && /bin/sh ./config.status java/CyrusSasl/Makefile depfiles
config.status: creating java/CyrusSasl/Makefile
config.status: executing depfiles commands
make[3]: Leaving directory `/var/tmp/portage/cyrus-sasl-2.1.18/work/cyrus-sasl-2.1.18/java/CyrusSasl'
make[3]: Entering directory `/var/tmp/portage/cyrus-sasl-2.1.18/work/cyrus-sasl-2.1.18/java/CyrusSasl'
CLASSPATH=..:./..:$CLASSPATH javac -d ..   Sasl.java GenericClient.java ClientFactory.java GenericCommon.java SaslClient.java SaslClientFactory.java SaslException.java SaslInputStream.java SaslOutputStream.java SaslUtils.java ServerFactory.java SaslServerFactory.java SaslServer.java GenericServer.java
make[3]: *** [classjavasasl.stamp] Error 137
make[3]: Leaving directory `/var/tmp/portage/cyrus-sasl-2.1.18/work/cyrus-sasl-2.1.18/java/CyrusSasl'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/var/tmp/portage/cyrus-sasl-2.1.18/work/cyrus-sasl-2.1.18/java'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/var/tmp/portage/cyrus-sasl-2.1.18/work/cyrus-sasl-2.1.18'
make: *** [all] Error 2

!!! ERROR: dev-libs/cyrus-sasl-2.1.18 failed.
!!! Function src_compile, Line 104, Exitcode 2
!!! compile problem
-----------------------------------------------------------


NB: results are identical with or without -fstack-protector

Reproducible: Always
Steps to Reproduce:
1. Build system with -fstack-protector and/or grsecurity
2. emerge cyrus-sasl-2.1.* (any cflags)
Actual Results:  
cyrus-sasl failed to compile as describe above, all available versions.

Expected Results:  
correct compilation

Machine #1:
-----------------------------------------------------------
Portage 2.0.50-r5 (default-x86-2004.0, gcc-3.3.2, glibc-2.3.2-r9, 2.4.20-wolk4.9s)
=================================================================
System uname: 2.4.20-wolk4.9s i686 Intel(R) Celeron(R) CPU 1.70GHz
Gentoo Base System version 1.4.3.13
Autoconf: sys-devel/autoconf-2.58-r1
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=pentium3 -O2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium3 -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache sandbox"
GENTOO_MIRRORS="rsync://mirrors.tds.net/gentoo http://gentoo.seren.com/gentoo
http://mirror.datapipe.net/gentoo http://mirror.datapipe.net/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="X509 apache2 berkdb crypt emacs ethereal fastcgi fdftk gd gdbm gif
imagemagick imap java jpeg kerberos ldap libwww maildir memlimit mmx mysql
ncurses nocd odbc pam pdflib perl png prelude python readline sasl slang socks5
spell sse ssl tiff truetype vhosts wmf x86 xfs xml xml2 zlib"
-----------------------------------------------------------

Machine #2:
-----------------------------------------------------------
Portage 2.0.50-r3 (default-x86-2004.0, gcc-3.3.3, glibc-2.3.3_pre20040207-r0,
2.4.20-wolk4.9s)
=================================================================
System uname: 2.4.20-wolk4.9s i686 Intel(R) Celeron(R) CPU 1.70GHz
Gentoo Base System version 1.4.6
Autoconf: sys-devel/autoconf-2.59-r3
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CFLAGS="-march=pentium3 -O3 -pipe -fomit-frame-pointer -fstack-protector"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium3 -O3 -pipe -fomit-frame-pointer -fstack-protector"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache sandbox"
GENTOO_MIRRORS="rsync://mirrors.tds.net/gentoo http://gentoo.seren.com/gentoo
http://mirror.datapipe.net/gentoo http://mirror.datapipe.net/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="X509 acl apache2 berkdb crypt emacs ethereal fastcgi fdftk gd gdbm gif
imagemagick imap java jpeg ldap libwww maildir memlimit mmx mysql ncurses nocd
odbc pam pdflib perl png prelude python readline sasl slang socks5 spell sse ssl
tiff truetype vhosts wmf x86 xfs xml xml2 zeo zlib" 
-----------------------------------------------------------

Machine #3:
-----------------------------------------------------------
Portage 2.0.50-r1 (default-x86-1.4, gcc-3.3.3, glibc-2.3.3_pre20040207-r0,
2.4.20-wolk4.9s)
=================================================================
System uname: 2.4.20-wolk4.9s i686 Pentium III (Coppermine)
Gentoo Base System version 1.4.3.13
Autoconf: sys-devel/autoconf-2.58-r1
Automake: sys-devel/automake-1.7.7
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=pentium3 -O2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/bind /var/qmail/alias /var/qmail/control
/var/vpopmail/domains /var/vpopmail/etc"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium3 -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache sandbox"
GENTOO_MIRRORS="http://mirrors.tds.net/gentoo
ftp://ftp.ussg.iu.edu/pub/linux/gentoo http://gentoo.ccccom.com
ftp://gentoo.ccccom.com"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY=""
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="acl apache2 berkdb cdr crypt cups curl emacs encode fbcon flash freetds gd
gif gpm imap ipv6 java jpeg libwww maildir mmx mysql ncurses oav odbc pam pdflib
perl png prelude python samba sasl socks5 spell sse ssl tcpd tiff truetype x86 zlib"
-----------------------------------------------------------
Comment 1 Zack Gilburd (RETIRED) gentoo-dev 2004-04-14 21:38:22 UTC 
Interestingly enough, cyrus-sasl-2.1.18 does compile on my server that has stacksmashing all the way through, however it's incompatiable with my mailserver setup somehow.  2.1.14 does *not* compile on this system, failing with the error messages described in this bug...
Comment 2 solar (RETIRED) gentoo-dev 2004-04-25 19:47:57 UTC 
Kirk Smith,
Is this still a problem?
Comment 3 solar (RETIRED) gentoo-dev 2004-09-08 18:32:22 UTC 
No feedback from reporter.. Closing bug as WORKFORSOME