Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 115892

Summary: mupad-2.5.2-r2 ebuild fails with TEXTRELs/executable stacks
Product: Gentoo Linux Reporter: phl0ri4n <a_jay1981>
Component: New packagesAssignee: Gentoo Science Related Packages <sci>
Severity: normal CC: hardened, thomas.schreck, Tinitus1
Priority: High    
Version: 2005.1   
Hardware: AMD64   
OS: Linux   
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 81745    

Description phl0ri4n 2005-12-17 17:26:34 UTC
scilab was installed before, after that i tried to install mupad but with the following error

QA Notice: the following files contain runtime text relocations
 Text relocations force the dynamic linker to perform extra
 work at startup, waste system resources, and may pose a security
 risk.  On some architectures, the code may not even function
 properly, if at all.
TEXTREL usr/lib/mupad/packages/scilab/modules/linux/scilab.mdm

QA Notice: the following files contain executable stacks
 Files with executable stacks will not work properly (or at all!)
 on some architectures/operating systems.  A bug should be filed
 at to make sure the file is fixed.
!WX --- --- usr/lib/mupad/packages/scilab/Scilab_modules/linux/lib/intudx.o

!!! ERROR: sci-mathematics/mupad-2.5.2-r2 failed.
!!! Function dyn_install, Line 1113, Exitcode 0
!!! Aborting due to serious QA concerns
!!! If you need support, post the topmost build error, NOT this status message.
Comment 1 Markus Dittrich (RETIRED) gentoo-dev 2005-12-18 11:00:18 UTC

Thanks for the report! Could you please provide us with your emerge info!

I can confirm the TEXTREL in scilab.mdm

[markus@fenris] scanelf -qyRF '%t %p' *
TEXTREL /mupad/packages/scilab/modules/linux/scilab.mdm

but since it is a binary package this will likely have to be fixed by upstream.

However, I don't seem to have an executable stack in intudx.o  

[markus@fenris] scanelf -qyRF '%e %p' *                              
[markus@fenris] scanelf -e lib/mupad/packages/scilab/Scilab_modules/linux/lib/intudx.o
ET_REL --- --- --- lib/mupad/packages/scilab/Scilab_modules/linux/lib/intudx.o 

Comment 2 phl0ri4n 2005-12-18 12:29:10 UTC
Portage 2.1_pre1 (default-linux/amd64/2005.1, gcc-3.4.4, glibc-2.3.5-r3, 2.6.14-gentoo-r4 x86_64)
System uname: 2.6.14-gentoo-r4 x86_64 AMD Sempron(tm) Processor 3300+
Gentoo Base System version 1.12.0_pre11
ccache version 2.4 [enabled]
dev-lang/python:     2.3.5, 2.4.2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r1
sys-devel/libtool:   1.5.20-r1
virtual/os-headers:  2.6.11-r3
ACCEPT_KEYWORDS="amd64 ~amd64"
CFLAGS="-march=k8 -pipe -O2"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d"
CXXFLAGS="-march=k8 -pipe -O2"
FEATURES="autoconfig ccache distlocks sandbox sfperms strict"
USE="amd64 X acpi alsa apache2 arts audiofile avi berkdb bitmap-fonts bluetooth bzip2 ccache cdr crypt cups curl dvd dvdr eds emboss encode esd exif expat fam fat ffmpeg foomaticdb fortran gif gimp gimpprint gkrellm glut gmp gnuplot gpm gstreamer gtk gtk2 icq idn imagemagick imlib iproute2 ipv6 java javascript jpeg kde latex lcms libwww lzw lzw-tiff mad math mbox mhash mng mp3 mp4live mpeg mpeg2 mpeg4 mplayer mysql ncurses nls nvidia ogg oggvorbis opengl openssh openssl oss pam pcre pdf pdflib perl php plotutils png ppds python qt quicktime readline reiserfs samba sdl sftp spell sqlite ssl tcltk tcpd tetex tiff truetype truetype-fonts type1-fonts udev usb userlocales vorbis xinetd xml2 xmms xpm xv zlib elibc_glibc kernel_linux userland_GNU"
Comment 3 Markus Dittrich (RETIRED) gentoo-dev 2005-12-19 19:20:59 UTC

It looks like some of the binaries contain insecure runpaths

[markus@fenris] scanelf -qyRF '%r %p' *
/wiwianka/user/cube/gcc-3/linux/lib: /bin/mmg
/wiwianka/user/cube/gcc-3/linux/lib: /bin/mupad
/wiwianka/user/cube/gcc-3/linux/lib: /bin/mxdvi
/wiwianka/user/cube/gcc-3/linux/lib: /bin/
/wiwianka/user/cube/gcc-3/linux/lib: /bin/mxvcam
/wiwianka/user/cube/gcc-3/linux/lib: /bin/mxmupad
/wiwianka/user/cube/gcc-3/linux/lib: /modules/cdebug.mdm
/wiwianka/user/cube/gcc-3/linux/lib: /modules/stdmod.mdm
/wiwianka/user/cube/gcc-3/linux/lib: /modules/fetch.mdm
/wiwianka/user/cube/gcc-3/linux/lib: /modules/util.mdm
/wiwianka/user/cube/gcc-3/linux/lib: /modules/shell.mdm
/wiwianka/user/cube/gcc-3/linux/lib: /scilab/modules/linux/scilab.mdx

This should be the reason why portage aborts the emerge process.
In addition to the QA notices you posted you should have gotten 
something like

"QA Notice: the following files contain insecure RUNPATH
 Please file a bug about this at
 For more information on this issue, kindly review:"

Could you please confirm this?

Comment 4 phl0ri4n 2005-12-20 21:15:22 UTC
yes i can :-)
Comment 5 Markus Dittrich (RETIRED) gentoo-dev 2005-12-21 16:21:43 UTC
I will contact upstream to hopefully get the insecure runpath issues 
resolved. Unfortunately, the most recent version of mupad has the
same issues and a version bump won't do. Hence, for the time being
I have package.mask'ed mupad.

*** This bug has been marked as a duplicate of 81745 ***
Comment 6 SpanKY gentoo-dev 2005-12-21 17:38:53 UTC
you dont dupe 81745
Comment 7 SpanKY gentoo-dev 2005-12-21 17:39:09 UTC
make upstream fix it
Comment 8 Markus Dittrich (RETIRED) gentoo-dev 2005-12-26 08:49:43 UTC
*** Bug 116778 has been marked as a duplicate of this bug. ***
Comment 9 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-01 08:08:29 UTC
*** Bug 124297 has been marked as a duplicate of this bug. ***
Comment 10 solar (RETIRED) gentoo-dev 2006-03-01 11:11:40 UTC
Current 0.1.10 ~arch cvs revision 1.2 scanelf can fix 2 of the 3 problems with this package. scanelf -XxeR ${D} 
Versions older than the current ~arch had a bug on where the PT_LOAD could
be mismarked. 
With all the problems described here it sounds alot like it was 
built using the old faulty gcc-2.95.x