make[1]: Leaving directory '/var/tmp/portage/dev-qt/qtwebengine-5.9.3/work/qtwebengine-opensource-src-5.9.3/src' * Removing unnecessary /usr/lib64/libQt5WebEngineCore.la (no static archive) * Removing unnecessary /usr/lib64/libQt5WebEngine.la (no static archive) * Removing unnecessary /usr/lib64/libQt5WebEngineWidgets.la (no static archive) * XATTR_PAX marking -m /var/tmp/portage/dev-qt/qtwebengine-5.9.3/image/usr/lib64/qt5/libexec/QtWebEngineProcess with paxctl-ng >>> Completed installing qtwebengine-5.9.3 into /var/tmp/portage/dev-qt/qtwebengine-5.9.3/image/ * Final size of build directory: 2781452 KiB ( 2.6 GiB) * Final size of installed tree: 166484 KiB (162.5 MiB) * QA Notice: The following files contain writable and executable sections * Files with such sections will not work properly (or at all!) on some * architectures/operating systems. A bug should be filed at * https://bugs.gentoo.org/ to make sure the issue is fixed. * For more information, see: * * https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart * * Please include the following list of files in your report: * Note: Bugs should be filed for the respective maintainers * of the package in question and not hardened@g.o. * RWX --- --- usr/lib64/libQt5WebEngineCore.so.5.9.3 strip: x86_64-pc-linux-gnu-strip --strip-unneeded -R .comment -R .GCC.command.line -R .note.gnu.gold-version usr/lib64/qt5/libexec/QtWebEngineProcess usr/lib64/libQt5WebEngine.so.5.9.3 usr/lib64/libQt5WebEngineCore.so.5.9.3 usr/lib64/qt5/bin/qwebengine_convert_dict usr/lib64/qt5/qml/QtWebEngine/libqtwebengineplugin.so usr/lib64/libQt5WebEngineWidgets.so.5.9.3 usr/lib64/qt5/plugins/designer/libqwebengineview.so
scanelf -e /usr/lib64/libQt5WebEngineCore.so.5.9.3 TYPE STK/REL/PTL FILE ET_DYN RWX RW- RW- /usr/lib64/libQt5WebEngineCore.so.5.9.3 readelf -lW /usr/lib64/libQt5WebEngineCore.so.5.9.3 Elf file type is DYN (Shared object file) Entry point 0x0 There are 8 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000000040 0x0000000000000040 0x0001c0 0x0001c0 R 0x8 LOAD 0x000000 0x0000000000000000 0x0000000000000000 0x617dcf8 0x617dcf8 R E 0x1000 LOAD 0x617e3c0 0x000000000617f3c0 0x000000000617f3c0 0x2f5638 0x34b9d0 RW 0x1000 DYNAMIC 0x6446e70 0x0000000006447e70 0x0000000006447e70 0x000570 0x000570 RW 0x8 GNU_EH_FRAME 0x5f99fd4 0x0000000005f99fd4 0x0000000005f99fd4 0x1e3d24 0x1e3d24 R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RWE 0x10 TLS 0x617e3c0 0x000000000617f3c0 0x000000000617f3c0 0x000010 0x000010 R 0x8 GNU_RELRO 0x617e3c0 0x000000000617f3c0 0x000000000617f3c0 0x2cfc40 0x2cfc40 RW 0x20 Section to Segment mapping: Segment Sections... 00 01 .dynsym .dynstr .gnu.hash .gnu.version .gnu.version_d .gnu.version_r .rela.dyn .rela.plt .init .plt .text .fini .rodata .eh_frame .eh_frame_hdr 02 .tdata .data.rel.ro.local .fini_array .init_array .data.rel.ro .dynamic .got .got.plt .tm_clone_table .data .bss 03 .dynamic 04 .eh_frame_hdr 05 06 .tdata 07 .tdata .data.rel.ro.local .fini_array .init_array .data.rel.ro .dynamic .got .got.plt So the stack is RWX...
Tried to take a look at on the linked libraries and found no other with GNU_STACK executable.
scanelf -lpqe RWX --- --- /usr/lib64/libQt5WebEngineCore.so.5.9.3 !WX --- --- /usr/lib64/crt0-efi-x86_64.o RWX --- --- /usr/bin/grub2-emu RWX --- --- /usr/bin/grub2-emu-lite
You can use fix-gnustack to remove the X mark on the stack. We need to find the asm code that miss to add the no RWX stack code in the file as in the link to the wiki page. QT is this some thing upsteam should fix?
(In reply to Magnus Granberg from comment #4) > You can use fix-gnustack to remove the X mark on the stack. > We need to find the asm code that miss to add the no RWX stack code in the > file > as in the link to the wiki page. > QT is this some thing upsteam should fix? Hi Zorry! I try to find the culprit file and report back. BR: Dw.
Created attachment 509322 [details, diff] missing-asm-gnu-stack-sections.diff scanelf -qeR . !WX --- --- ./src/core/Release/obj/media/base/media_yasm/scale_yuv_to_rgb_sse.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/convert_yuv_to_rgb_sse.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/linear_scale_yuv_to_rgb_mmx_x64.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/scale_yuv_to_rgb_sse2_x64.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/empty_register_state_mmx.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/linear_scale_yuv_to_rgb_sse.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/convert_rgb_to_yuv_ssse3.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/linear_scale_yuv_to_rgb_mmx.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/convert_yuva_to_argb_mmx.o !WX --- --- ./src/core/Release/obj/media/base/media_yasm/scale_yuv_to_rgb_mmx.o !WX --- --- ./src/core/Release/obj/third_party/WebKit/Source/platform/heap/asm/asm/SaveRegisters_x86.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/sha256-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/vpaes-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/sha512-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/rsaz-avx2.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/sha1-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x86_64-mont5.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/rdrand-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/bsaes-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/rsaz-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x86_64-mont.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x25519-asm-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/aesni-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/md5-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/ghash-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/p256-x86_64-asm.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/aesni-gcm-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/aes-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/chacha-x86_64.o !WX --- --- ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x25519-asm-x86_64.o RWX --- --- ./lib/libQt5WebEngineCore.so.5.9.3
(In reply to Attila Tóth from comment #6) > Created attachment 509322 [details, diff] [details, diff] > missing-asm-gnu-stack-sections.diff > > scanelf -qeR . > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/scale_yuv_to_rgb_sse.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/convert_yuv_to_rgb_sse.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/linear_scale_yuv_to_rgb_mmx_x64. > o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/scale_yuv_to_rgb_sse2_x64.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/empty_register_state_mmx.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/linear_scale_yuv_to_rgb_sse.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/convert_rgb_to_yuv_ssse3.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/linear_scale_yuv_to_rgb_mmx.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/convert_yuva_to_argb_mmx.o > !WX --- --- > ./src/core/Release/obj/media/base/media_yasm/scale_yuv_to_rgb_mmx.o > !WX --- --- > ./src/core/Release/obj/third_party/WebKit/Source/platform/heap/asm/asm/ > SaveRegisters_x86.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/sha256-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/vpaes-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/sha512-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/rsaz-avx2.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/sha1-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x86_64-mont5.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/rdrand-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/bsaes-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/rsaz-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x86_64-mont.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x25519-asm-x86_64. > o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/aesni-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/md5-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/ghash-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/p256-x86_64-asm.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/aesni-gcm-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/aes-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/chacha-x86_64.o > !WX --- --- > ./src/core/Release/obj/third_party/boringssl/boringssl_asm/x25519-asm-x86_64. > o > RWX --- --- ./lib/libQt5WebEngineCore.so.5.9.3 Thanks DW So the culprit is Boringssl a third party package in Chromium code.
(In reply to Magnus Granberg from comment #7) > (In reply to Attila Tóth from comment #6) > > Created attachment 509322 [details, diff] [details, diff] [details, diff] > > missing-asm-gnu-stack-sections.diff > Thanks DW > So the culprit is Boringssl a third party package in Chromium code. Boringssl is also located in the chromium tree. The couple of files in chromium media could be taken care of by modifying a single x86inc.asm included by all. Chromium has more up-to-date x86inc.asm for two libs, for e.g. x265. The x86inc.asm of media doesn't contain the necessary snippets for some reason. Boringssl's files were taken care of one-by-one. For this reason the attached patch works for x86_64. Other arches may have to take care of other asm source files.
(In reply to Attila Tóth from comment #8) > (In reply to Magnus Granberg from comment #7) > > (In reply to Attila Tóth from comment #6) > > > Created attachment 509322 [details, diff] [details, diff] [details, diff] [details, diff] > > > missing-asm-gnu-stack-sections.diff > > Thanks DW > > So the culprit is Boringssl a third party package in Chromium code. > > Boringssl is also located in the chromium tree. The couple of files in > chromium media could be taken care of by modifying a single x86inc.asm > included by all. Chromium has more up-to-date x86inc.asm for two libs, for > e.g. x265. The x86inc.asm of media doesn't contain the necessary snippets > for some reason. Boringssl's files were taken care of one-by-one. For this > reason the attached patch works for x86_64. Other arches may have to take > care of other asm source files. The x86inc.asm do allready have the fix put it looks like it don't work. Do Chromium have same prob? Should be fixed upstream in Chromium
(In reply to Magnus Granberg from comment #9) > (In reply to Attila Tóth from comment #8) > > (In reply to Magnus Granberg from comment #7) > > > (In reply to Attila Tóth from comment #6) > > > > Created attachment 509322 [details, diff] [details, diff] [details, diff] [details, diff] [details, diff] > > > > missing-asm-gnu-stack-sections.diff > > > Thanks DW > > > So the culprit is Boringssl a third party package in Chromium code. > > > > Boringssl is also located in the chromium tree. The couple of files in > > chromium media could be taken care of by modifying a single x86inc.asm > > included by all. Chromium has more up-to-date x86inc.asm for two libs, for > > e.g. x265. The x86inc.asm of media doesn't contain the necessary snippets > > for some reason. Boringssl's files were taken care of one-by-one. For this > > reason the attached patch works for x86_64. Other arches may have to take > > care of other asm source files. > The x86inc.asm do allready have the fix put it looks like it don't work. > Do Chromium have same prob? > Should be fixed upstream in Chromium There are three x86inc.asm in the chromium tree and one of them (qtwebengine-opensource-src-5.9.3-dwok/src/3rdparty/chromium/third_party/x86inc/x86inc.asm) doesn't include the necessary stuff. That causes objects without GNU-stack section. The attached patch applies cleanly on my system and works for me (x86_64). I don't use chromium, but will take a look. BTW I use firefox, and it links its own python2.7 during compile, which doesn't get pax-marked for E, therefore fails to run. I have a patch for that. May open a separate bug for that...
(In reply to Magnus Granberg from comment #9) > (In reply to Attila Tóth from comment #8) > > (In reply to Magnus Granberg from comment #7) > > > (In reply to Attila Tóth from comment #6) > > > > Created attachment 509322 [details, diff] [details, diff] [details, diff] [details, diff] [details, diff] > > > > missing-asm-gnu-stack-sections.diff > > > Thanks DW > > > So the culprit is Boringssl a third party package in Chromium code. > > > > Boringssl is also located in the chromium tree. The couple of files in > > chromium media could be taken care of by modifying a single x86inc.asm > > included by all. Chromium has more up-to-date x86inc.asm for two libs, for > > e.g. x265. The x86inc.asm of media doesn't contain the necessary snippets > > for some reason. Boringssl's files were taken care of one-by-one. For this > > reason the attached patch works for x86_64. Other arches may have to take > > care of other asm source files. > The x86inc.asm do allready have the fix put it looks like it don't work. > Do Chromium have same prob? > Should be fixed upstream in Chromium Qtwebengine seems to contain an outdated version of chromium. Nevertheless it looks like the same when it comes to asm GNU-stack sections. ffmpeg and vpx sources located in the third_party directory has an x86inc.asm, that handles GNU-stack correctly. On the other hand, boringssl contains sources withouth that treatment. Although boringssl has an src/util/BUILD.toplevel file containing: " boringssl_copts = [ # Assembler option --noexecstack adds .note.GNU-stack to each object to # ensure that binaries can be built with non-executable stack. "-Wa,--noexecstack", " to produce correct objects, but GN build system probably ignores that. Chromium: 500Mb+ xz archive - OMG. I try to stay away from chromium and stuff, because of bugs like this: https://bugs.gentoo.org/613668 I don't like the idea of having a suid binary just to start a web browser. If some VMs can cope with GRSEC a sandbox must be capable of doing so without a suid flag.
laptop1 /home/tmp/portage/portage/www-client/chromium-64.0.3282.14/work/chromium-64.0.3282.14/out/Release # scanelf -qeR . !WX --- --- ./obj/third_party/boringssl/boringssl_asm/rdrand-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/sha1-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/rsaz-avx2.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/chacha20_poly1305_x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/x86_64-mont5.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/vpaes-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/sha256-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/x86_64-mont.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/md5-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/sha512-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/ghash-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/aesni-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/aes-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/p256-x86_64-asm.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/aes128gcmsiv-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/chacha-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/aesni-gcm-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/x25519-asm-x86_64.o !WX --- --- ./obj/third_party/boringssl/boringssl_asm/bsaes-x86_64.o !WX --- --- ./obj/third_party/WebKit/Source/platform/heap/asm/asm/SaveRegisters_x86.o laptop1 /home/tmp/portage/portage/www-client/chromium-64.0.3282.14/work/chromium-64.0.3282.14/out/Release # Same problem byt thay use Wl,-z,noexecstack in the finel linking. We do the same or try to get chromium to fix the RWX thing?
(In reply to Magnus Granberg from comment #12) > 0.3282.14/out/Release # scanelf -qeR . > !WX --- --- ./obj/third_party/boringssl/boringssl_asm/rdrand-x86_64.o > !WX --- --- ./obj/third_party/boringssl/boringssl_asm/bsaes-x86_64.o > !WX --- --- > ./obj/third_party/WebKit/Source/platform/heap/asm/asm/SaveRegisters_x86.o > laptop1 > /home/tmp/portage/portage/www-client/chromium-64.0.3282.14/work/chromium-64. > 0.3282.14/out/Release # > > Same problem byt thay use Wl,-z,noexecstack in the finel linking. > We do the same or try to get chromium to fix the RWX thing? It would be interesting to know how to get GN build system to respect BUILD.toplevel's noexecstack option or how to port that statement. That could make the patch simpler for qtwebengine and possibly for chromium as well. I suspect it may take less time for the chromium folks to enlighten us about that unless there's somebody with enough time to take a look. Eventually it would be beneficial to notify upstreams. When it comes to qtwebengine, I expect that outdated x86inc.asm no longer found in chromium to disappear as qt folks will incorporate more recent version of chromium source into their tree.
*** Bug 652044 has been marked as a duplicate of this bug. ***
Created attachment 539074 [details, diff] Updated patch for qtwebengine-5.11.1 Changes in the included chromium's boringssl source files requires modification to the patch. It could be also performed in the ebuild using sed, printf or echo to append the changes to multiple files in a directory, but gentoo's user patch method is easy and straightforward for those interested keeping the ebuild intact.
*** Bug 669090 has been marked as a duplicate of this bug. ***
* Package: dev-qt/qtwebengine-5.11.1 * Repository: gentoo * Maintainer: qt@gentoo.org * Upstream: https://bugreports.qt.io/ * USE: abi_x86_64 alsa amd64 elibc_glibc kernel_linux pax_kernel system-ffmpeg system-icu userland_GNU widgets * FEATURES: preserve-libs sandbox userpriv usersandbox >>> Unpacking source... >>> Unpacking qtwebengine-everywhere-src-5.11.1.tar.xz to /var/tmp/portage/dev-qt/qtwebengine-5.11.1/work >>> Source unpacked in /var/tmp/portage/dev-qt/qtwebengine-5.11.1/work >>> Preparing source in /var/tmp/portage/dev-qt/qtwebengine-5.11.1/work/qtwebengine-everywhere-src-5.11.1 ... * Applying qtwebengine-5.9.6-gcc8.patch ... [ ok ] * Applying qtwebengine-5.11.1-libxml2-disable-catalogs.patch ... [ ok ] * Applying qtwebengine-5.11.1-ffmpeg4.patch ... [ ok ] * Applying qtwebengine-5.11.1-eglGetProcAddress-fallback-lookup.patch ... [ ok ] * Applying qtwebengine-5.11.1-nouveau-disable-gpu.patch ... [ ok ] * Applying qtwebengine-5.9.3-paxmark-mksnapshot.patch ... 1 out of 2 hunks FAILED -- saving rejects to file src/3rdparty/chromium/v8/BUILD.gn.rej [ !! ] * ERROR: dev-qt/qtwebengine-5.11.1::gentoo failed (prepare phase): * patch -p1 failed with /var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark-mksnapshot.patch * * Call stack: * ebuild.sh, line 124: Called src_prepare * environment, line 3999: Called qt5-build_src_prepare * environment, line 3581: Called default * phase-functions.sh, line 868: Called default_src_prepare * phase-functions.sh, line 933: Called __eapi6_src_prepare * environment, line 389: Called eapply '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.6-gcc8.patch' '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-libxml2-disable-catalogs.patch' '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-ffmpeg4.patch' '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-eglGetProcAddress-fallback-lookup.patch' '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-nouveau-disable-gpu.patch' '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark-mksnapshot.patch' * environment, line 1079: Called _eapply_patch '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark-mksnapshot.patch' * environment, line 1017: Called __helpers_die 'patch -p1 failed with /var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark-mksnapshot.patch' * isolated-functions.sh, line 121: Called die * The specific snippet of code: * die "$@" * * If you need support, post the output of `emerge --info '=dev-qt/qtwebengine-5.11.1::gentoo'`, * the complete build log and the output of `emerge -pqv '=dev-qt/qtwebengine-5.11.1::gentoo'`. * The complete build log is located at '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/temp/build.log'. * The ebuild environment file is located at '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/temp/environment'. * Working directory: '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/work/qtwebengine-everywhere-src-5.11.1' * S: '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/work/qtwebengine-everywhere-src-5.11.1' Portage 2.3.49 (python 3.6.5-final-0, default/linux/amd64/17.0/no-multilib/hardened, gcc-7.3.0, glibc-2.27-r6, 4.8.17-hardened-r2-gnu x86_64) ================================================================= System Settings ================================================================= System uname: Linux-4.8.17-hardened-r2-gnu-x86_64-Intel-R-_Celeron-R-_CPU_N3050_@_1.60GHz-with-gentoo-2.4.1 KiB Mem: 1939224 total, 103456 free KiB Swap: 4194300 total, 4194300 free Timestamp of repository gentoo: Mon, 22 Oct 2018 17:00:01 +0000 Head commit of repository gentoo: eb8c10cf97fd2bd1288d2699ccc73ca425b8b243 sh bash 4.4_p12 ld GNU ld (Gentoo 2.30 p5) 2.30.0 app-shells/bash: 4.4_p12::gentoo dev-lang/perl: 5.24.3-r1::gentoo dev-lang/python: 2.7.15::gentoo, 3.6.5::gentoo dev-util/cmake: 3.9.6::gentoo dev-util/pkgconfig: 0.29.2::gentoo sys-apps/baselayout: 2.4.1-r2::gentoo sys-apps/openrc: 0.38.3::gentoo sys-apps/sandbox: 2.13::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69-r4::gentoo sys-devel/automake: 1.15.1-r2::gentoo sys-devel/binutils: 2.30-r4::gentoo sys-devel/gcc: 7.3.0-r3::gentoo sys-devel/gcc-config: 1.8-r1::gentoo sys-devel/libtool: 2.4.6-r3::gentoo sys-devel/make: 4.2.1-r4::gentoo sys-kernel/linux-headers: 4.13::gentoo (virtual/os-headers) sys-libs/glibc: 2.27-r6::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 sync-rsync-verify-metamanifest: yes sync-rsync-verify-jobs: 1 sync-rsync-extra-opts: sync-rsync-verify-max-age: 24 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="@FREE" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -pipe -march=native" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -pipe -march=native" DISTDIR="/usr/portage/distfiles" EMERGE_DEFAULT_OPTS="--quiet-build=y --keep-going=y" ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs buildsyspkg config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="ftp://ftp.vectranet.pl/gentoo/" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="en_US" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="X acl alsa amd64 bzip2 consolekit crypt cxx dbus hardened iconv ipv6 libtirpc ncurses nls nptl openmp pam pax_kernel pcre pie policykit qt5 readline seccomp smp ssl ssp threads unicode xattr xtpax zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon plan sheets stage words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="evdev" KERNEL="linux" L10N="en-US" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6 php7-1" POSTGRES_TARGETS="postgres9_5 postgres10" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" RUBY_TARGETS="ruby23" USERLAND="GNU" VIDEO_CARDS="i965 intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
(In reply to Andrey Aleksandrovich from comment #17) > * Package: dev-qt/qtwebengine-5.11.1 > * Repository: gentoo > * Maintainer: qt@gentoo.org > * Upstream: https://bugreports.qt.io/ > * USE: abi_x86_64 alsa amd64 elibc_glibc kernel_linux pax_kernel > system-ffmpeg system-icu userland_GNU widgets > * FEATURES: preserve-libs sandbox userpriv usersandbox > >>> Unpacking source... > >>> Unpacking qtwebengine-everywhere-src-5.11.1.tar.xz to /var/tmp/portage/dev-qt/qtwebengine-5.11.1/work > >>> Source unpacked in /var/tmp/portage/dev-qt/qtwebengine-5.11.1/work > >>> Preparing source in /var/tmp/portage/dev-qt/qtwebengine-5.11.1/work/qtwebengine-everywhere-src-5.11.1 ... > * Applying qtwebengine-5.9.6-gcc8.patch ... > [ ok ] > * Applying qtwebengine-5.11.1-libxml2-disable-catalogs.patch ... > [ ok ] > * Applying qtwebengine-5.11.1-ffmpeg4.patch ... > [ ok ] > * Applying qtwebengine-5.11.1-eglGetProcAddress-fallback-lookup.patch ... > [ ok ] > * Applying qtwebengine-5.11.1-nouveau-disable-gpu.patch ... > [ ok ] > * Applying qtwebengine-5.9.3-paxmark-mksnapshot.patch ... > 1 out of 2 hunks FAILED -- saving rejects to file > src/3rdparty/chromium/v8/BUILD.gn.rej > [ !! ] > * ERROR: dev-qt/qtwebengine-5.11.1::gentoo failed (prepare phase): > * patch -p1 failed with > /var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark- > mksnapshot.patch > * > * Call stack: > * ebuild.sh, line 124: Called src_prepare > * environment, line 3999: Called qt5-build_src_prepare > * environment, line 3581: Called default > * phase-functions.sh, line 868: Called default_src_prepare > * phase-functions.sh, line 933: Called __eapi6_src_prepare > * environment, line 389: Called eapply > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.6-gcc8. > patch' > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-libxml2- > disable-catalogs.patch' > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-ffmpeg4. > patch' > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1- > eglGetProcAddress-fallback-lookup.patch' > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.11.1-nouveau- > disable-gpu.patch' > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark- > mksnapshot.patch' > * environment, line 1079: Called _eapply_patch > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark- > mksnapshot.patch' > * environment, line 1017: Called __helpers_die 'patch -p1 > failed with > /var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark- > mksnapshot.patch' > * isolated-functions.sh, line 121: Called die > * The specific snippet of code: > * die "$@" > * > * If you need support, post the output of `emerge --info > '=dev-qt/qtwebengine-5.11.1::gentoo'`, > * the complete build log and the output of `emerge -pqv > '=dev-qt/qtwebengine-5.11.1::gentoo'`. > * The complete build log is located at > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/temp/build.log'. > * The ebuild environment file is located at > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/temp/environment'. > * Working directory: > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/work/qtwebengine-everywhere-src- > 5.11.1' > * S: > '/var/tmp/portage/dev-qt/qtwebengine-5.11.1/work/qtwebengine-everywhere-src- > 5.11.1' > > > > Portage 2.3.49 (python 3.6.5-final-0, > default/linux/amd64/17.0/no-multilib/hardened, gcc-7.3.0, glibc-2.27-r6, > 4.8.17-hardened-r2-gnu x86_64) > ================================================================= > System Settings > ================================================================= > System uname: > Linux-4.8.17-hardened-r2-gnu-x86_64-Intel-R-_Celeron-R-_CPU_N3050_@_1.60GHz- > with-gentoo-2.4.1 > KiB Mem: 1939224 total, 103456 free > KiB Swap: 4194300 total, 4194300 free > Timestamp of repository gentoo: Mon, 22 Oct 2018 17:00:01 +0000 > Head commit of repository gentoo: eb8c10cf97fd2bd1288d2699ccc73ca425b8b243 > sh bash 4.4_p12 > ld GNU ld (Gentoo 2.30 p5) 2.30.0 > app-shells/bash: 4.4_p12::gentoo > dev-lang/perl: 5.24.3-r1::gentoo > dev-lang/python: 2.7.15::gentoo, 3.6.5::gentoo > dev-util/cmake: 3.9.6::gentoo > dev-util/pkgconfig: 0.29.2::gentoo > sys-apps/baselayout: 2.4.1-r2::gentoo > sys-apps/openrc: 0.38.3::gentoo > sys-apps/sandbox: 2.13::gentoo > sys-devel/autoconf: 2.13::gentoo, 2.69-r4::gentoo > sys-devel/automake: 1.15.1-r2::gentoo > sys-devel/binutils: 2.30-r4::gentoo > sys-devel/gcc: 7.3.0-r3::gentoo > sys-devel/gcc-config: 1.8-r1::gentoo > sys-devel/libtool: 2.4.6-r3::gentoo > sys-devel/make: 4.2.1-r4::gentoo > sys-kernel/linux-headers: 4.13::gentoo (virtual/os-headers) > sys-libs/glibc: 2.27-r6::gentoo > Repositories: > > gentoo > location: /usr/portage > sync-type: rsync > sync-uri: rsync://rsync.gentoo.org/gentoo-portage > priority: -1000 > sync-rsync-verify-metamanifest: yes > sync-rsync-verify-jobs: 1 > sync-rsync-extra-opts: > sync-rsync-verify-max-age: 24 > > ACCEPT_KEYWORDS="amd64" > ACCEPT_LICENSE="@FREE" > CBUILD="x86_64-pc-linux-gnu" > CFLAGS="-O2 -pipe -march=native" > CHOST="x86_64-pc-linux-gnu" > CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt" > CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d > /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild > /etc/sandbox.d /etc/terminfo" > CXXFLAGS="-O2 -pipe -march=native" > DISTDIR="/usr/portage/distfiles" > EMERGE_DEFAULT_OPTS="--quiet-build=y --keep-going=y" > ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY PERL5LIB PERL5OPT PERLPREFIX > PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME > XDG_DATA_HOME XDG_RUNTIME_DIR" > FCFLAGS="-O2 -pipe" > FEATURES="assume-digests binpkg-logs buildsyspkg config-protect-if-modified > distlocks ebuild-locks fixlafiles merge-sync multilib-strict news > parallel-fetch preserve-libs protect-owned sandbox sfperms strict > unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv > usersandbox usersync xattr" > FFLAGS="-O2 -pipe" > GENTOO_MIRRORS="ftp://ftp.vectranet.pl/gentoo/" > LANG="en_US.utf8" > LDFLAGS="-Wl,-O1 -Wl,--as-needed" > LINGUAS="en_US" > MAKEOPTS="-j3" > PKGDIR="/usr/portage/packages" > PORTAGE_CONFIGROOT="/" > PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times > --omit-dir-times --compress --force --whole-file --delete --stats > --human-readable --timeout=180 --exclude=/distfiles --exclude=/local > --exclude=/packages --exclude=/.git" > PORTAGE_TMPDIR="/var/tmp" > USE="X acl alsa amd64 bzip2 consolekit crypt cxx dbus hardened iconv ipv6 > libtirpc ncurses nls nptl openmp pam pax_kernel pcre pie policykit qt5 > readline seccomp smp ssl ssp threads unicode xattr xtpax zlib" ABI_X86="64" > ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x > ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 > trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core > authz_core socache_shmcb unixd actions alias auth_basic authn_alias > authn_anon authn_dbm authn_default authn_file authz_dbm authz_default > authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid > dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache > filter headers include info log_config logio mem_cache mime mime_magic > negotiation rewrite setenvif speling status unique_id userdir usertrack > vhost_alias" CALLIGRA_FEATURES="karbon plan sheets stage words" > COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" > CPU_FLAGS_X86="aes mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" > ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin > garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver > oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip > tripmate tnt ublox ubx" GRUB_PLATFORMS="pc" INPUT_DEVICES="evdev" > KERNEL="linux" L10N="en-US" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 > lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console > presenter-minimizer" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6 > php7-1" POSTGRES_TARGETS="postgres9_5 postgres10" > PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" > RUBY_TARGETS="ruby23" USERLAND="GNU" VIDEO_CARDS="i965 intel" > XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p > iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark > dhcpmac delude chaos account" > Unset: CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BINHOST, > PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, > PORTAGE_RSYNC_EXTRA_OPTS That is a diffrent error so open a new bug.
(In reply to Andrey Aleksandrovich from comment #17) > * Applying qtwebengine-5.9.3-paxmark-mksnapshot.patch ... > 1 out of 2 hunks FAILED -- saving rejects to file > src/3rdparty/chromium/v8/BUILD.gn.rej > [ !! ] > * ERROR: dev-qt/qtwebengine-5.11.1::gentoo failed (prepare phase): > * patch -p1 failed with > /var/tmp/portage/dev-qt/qtwebengine-5.11.1/files/qtwebengine-5.9.3-paxmark- > mksnapshot.patch qtwebengine-5.9.3-paxmark-mksnapshot.patch no longer works for qtwebengine-5.11.*. Try to replace it with the attached patch to this bug. Right now it requires a modified ebuild. I will have time later today or tomorrow to check qtwebengine-5.11.2 against the attached patch.
I have two additional patches for 5.11.1 : diff -Naur qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S --- qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S 2018-06-15 09:47:20.000000000 +0200 +++ ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S 2018-10-23 01:31:49.000000000 +0200 @@ -1892,3 +1892,6 @@ #endif /* __x86_64__ */ #endif /* !OPENSSL_NO_ASM */ +#if defined(__linux__) && defined(__ELF__) +.section .note.GNU-stack,"",%progbits +#endif diff -Naur qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/WebKit/Source/platform/heap/asm/SaveRegisters_x86.asm ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/WebKit/Source/platform/heap/asm/SaveRegisters_x86.asm --- qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/WebKit/Source/platform/heap/asm/SaveRegisters_x86.asm 2018-06-15 09:47:20.000000000 +0200 +++ ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/WebKit/Source/platform/heap/asm/SaveRegisters_x86.asm 2018-10-23 01:36:32.000000000 +0200 @@ -157,3 +157,12 @@ %else %error "Unsupported platform." %endif +%ifidn __OUTPUT_FORMAT__,elf +section .note.GNU-stack noalloc noexec nowrite progbits +%endif +%ifidn __OUTPUT_FORMAT__,elf32 +section .note.GNU-stack noalloc noexec nowrite progbits +%endif +%ifidn __OUTPUT_FORMAT__,elf64 +section .note.GNU-stack noalloc noexec nowrite progbits +%endif
(In reply to Kristian Duus Østergaard from comment #20) > I have two additional patches for 5.11.1 : > > diff -Naur > qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/ > boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S > ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/ > boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S > --- > qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/ > boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S 2018-06-15 > 09:47:20.000000000 +0200 > +++ > ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/ > boringssl/src/crypto/curve25519/asm/x25519-asm-x86_64.S 2018-10-23 > 01:31:49.000000000 +0200 > @@ -1892,3 +1892,6 @@ > > #endif /* __x86_64__ */ > #endif /* !OPENSSL_NO_ASM */ > +#if defined(__linux__) && defined(__ELF__) > +.section .note.GNU-stack,"",%progbits > +#endif > diff -Naur > qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/WebKit/ > Source/platform/heap/asm/SaveRegisters_x86.asm > ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/ > WebKit/Source/platform/heap/asm/SaveRegisters_x86.asm > --- > qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/WebKit/ > Source/platform/heap/asm/SaveRegisters_x86.asm 2018-06-15 09:47:20.000000000 > +0200 > +++ > ../new/qtwebengine-everywhere-src-5.11.1/src/3rdparty/chromium/third_party/ > WebKit/Source/platform/heap/asm/SaveRegisters_x86.asm 2018-10-23 > 01:36:32.000000000 +0200 > @@ -157,3 +157,12 @@ > %else > %error "Unsupported platform." > %endif > +%ifidn __OUTPUT_FORMAT__,elf > +section .note.GNU-stack noalloc noexec nowrite progbits > +%endif > +%ifidn __OUTPUT_FORMAT__,elf32 > +section .note.GNU-stack noalloc noexec nowrite progbits > +%endif > +%ifidn __OUTPUT_FORMAT__,elf64 > +section .note.GNU-stack noalloc noexec nowrite progbits > +%endif The updated patch attached to this bug takes care both file your are mentioning. If you've used the patch, your changes would result in a conflict for the first file. The second file is patched at a different location, the changes would be redundant.
Created attachment 553406 [details, diff] Link with -noexecstack on 5.11 This patch add -noexecstack to the linker command. Pleas test.
Created attachment 553410 [details, diff] Updated paxmark mksnapshot for 5.11 Update for 5.11
the bug is confirmed on 5.11.3
Same problem pops up for the latest qtwebengine-5.12.3 in the tree.
Created attachment 576412 [details, diff] missing-asm-gnu-stack-sections.diff for version 5.12.3 Old-style (not the simple patch by Zorry) patch updated for version 5.12.3. Works for me.
Surprisingly, the recent dev-qt/qtwebengine-5.12.4 seems to be fine!
*** Bug 692476 has been marked as a duplicate of this bug. ***
