Bug 116103

Summary:	>=dev-libs/libffi-3.4.1-r1 contains executable stacks
Product:	Gentoo Linux	Reporter:	Petteri Räty (RETIRED) <betelgeuse>
Component:	[OLD] Library	Assignee:	No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	araujo, common-lisp, flameeyes, java, levertond, scheme, toolchain
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.gentoo.org/proj/en/hardened/gnu-stack.xml
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	163724
Bug Blocks:

Description Petteri Räty (RETIRED) gentoo-dev

2005-12-19 15:38:52 UTC

QA Notice: the following files contain executable stacks
 Files with executable stacks will not work properly (or at all!)
 on some architectures/operating systems.  A bug should be filed
 at http://bugs.gentoo.org/ to make sure the file is fixed.
RWX --- --- usr/lib/libffi/libffi.so.3.0.0

Turn on FEATURES="stricter" using the latest portage in the tree.
See http://www.gentoo.org/proj/en/hardened/gnu-stack.xml for help in fixing.

The problem is in at least 3.4.1-r1 and 3.4.3

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2006-01-08 01:37:50 UTC

This would be best punted from portage whenever possible. Duplicating parts of gcc ebuild with a whacky keywording scheme that makes it impossible to punt any version is not one of the greatest things in portage...

Comment 2 Bernard Cafarelli gentoo-dev

2007-09-10 21:32:07 UTC

Last gnustep packages depending on dev-libs/libffi have been removed from portage... So for gnustep, this can be removed from portage

However some packages (java and scheme for example) still depend on it!

Comment 3 Bernard Cafarelli gentoo-dev

2007-09-10 21:48:14 UTC

So anyone interested in this package?

Comment 4 Marijn Schouten (RETIRED) gentoo-dev

2007-09-11 09:09:41 UTC

right, it is unmaintained now. I don't know why this should be but as long as there is no alternative there are packages which need this. Actually I need version 4 and am abusing g-wrap for that purpose as it provides a bundled one. See also bug 163724.

Comment 5 Fabian Groffen gentoo-dev

2007-11-20 20:51:48 UTC

Not sure what the status of gcc is with regard to USE=libffi, but recently the GNUstep team has released a libffi-4.1.2 or something close to that.  I guess that one completely won't work with hardened as gcc-4 is still masked there.

Comment 6 David Leverton 2007-11-20 21:24:27 UTC

(In reply to comment #5)
> Not sure what the status of gcc is with regard to USE=libffi

I'm currently testing a patch for this, per discussion between vapier and peper on IRC yesterday, and hopefully will submit it later today.

Comment 7 Jakub Moc (RETIRED) gentoo-dev

2008-02-28 10:14:37 UTC

*** Bug 199541 has been marked as a duplicate of this bug. ***

Comment 8 Jakub Moc (RETIRED) gentoo-dev

2008-02-28 10:23:28 UTC

To be removed, nothing new to see here.