Bug 128075 – app-office/openoffice-2.0.1-r1 fails to compile with hardened system (stack smashing attack in function parseResource)

• Product: Gentoo Linux
• Status: RESOLVED NEEDINFO

[Description Marcel Meckel 2006-03-29 22:39:21 UTC]

# emerge -pv openoffice gcc glibc

These are the packages that I would merge, in order:

Calculating dependencies ...done!
[ebuild     U ] app-office/openoffice-2.0.1-r1 [2.0.0] -binfilter -eds -gnome -gtk +java +kde -ldap -mozilla -xml2 0 kB
[ebuild   R   ] sys-devel/gcc-3.4.5-r1  (-altivec) -bootstrap -boundschecking -build -doc -fortran -gcj +gtk -hardened -ip28 (-multilib) -multislot (-n32) (-n64) +nls -nocxx -nopie -nossp -objc -vanilla 0 kB
[ebuild   R   ] sys-libs/glibc-2.3.5-r2  -build -erandom -glibc-compat20 -glibc-omitfp +hardened -linuxthreads-tls (-multilib) +nls -nptl -nptlonly -pic -profile (-selinux) -userlocales 15,628 kB

Total size of downloads: 15,628 kB



# gcc-config -l
 [1] i686-pc-linux-gnu-3.3.6
 [2] i686-pc-linux-gnu-3.3.6-hardened
 [3] i686-pc-linux-gnu-3.3.6-hardenednopie
 [4] i686-pc-linux-gnu-3.3.6-hardenednopiessp
 [5] i686-pc-linux-gnu-3.3.6-hardenednossp
 [6] i686-pc-linux-gnu-3.4.5
 [7] i686-pc-linux-gnu-3.4.5-hardened *
 [8] i686-pc-linux-gnu-3.4.5-hardenednopie
 [9] i686-pc-linux-gnu-3.4.5-hardenednopiessp
 [10] i686-pc-linux-gnu-3.4.5-hardenednossp



genrb: stack smashing attack in function parseResource()
make[2]: *** [../data/out/build/icudt26l_root.res] Aborted
make[2]: Leaving directory `/var/tmp/portage/openoffice-2.0.1-r1/work/ooo-build-2.0.1.3/build/ooa680-m1/icu/unxlngi6.pro/misc/build/icu/source/data'
make[1]: *** [all-recursive] Error 2
make[1]: Leaving directory `/var/tmp/portage/openoffice-2.0.1-r1/work/ooo-build-2.0.1.3/build/ooa680-m1/icu/unxlngi6.pro/misc/build/icu/source'
dmake:  Error code 2, while making './unxlngi6.pro/misc/build/so_built_so_icu'
'---* tg_merge.mk *---'

ERROR: Error 65280 occurred while making /var/tmp/portage/openoffice-2.0.1-r1/work/ooo-build-2.0.1.3/build/ooa680-m1/icu
make: *** [stamp/build] Fehler 1


# emerge info
Portage 2.0.54 (default-linux/x86/2005.0, gcc-3.4.5-hardened, glibc-2.3.5-r2, 2.6.14-hardened-r5 i686)
=================================================================
System uname: 2.6.14-hardened-r5 i686 AMD Athlon(tm) XP 1700+
Gentoo Base System version 1.6.14
ccache version 2.3 [disabled]
dev-lang/python:     2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo"
LANG="de_DE@euro"
LINGUAS="de"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.de.gentoo.org/gentoo-portage"
USE="x86 3dnow 3dnowext X a52 aac aalib acpi acpi4linux alsa audiofile avi bash-completion bitmap-fonts browserplugin bzip2 bzlib cdparanoia cdr codecs crypt cups devfs26 divx4linux dnd dri dts dv dvb dvd dvdr dvdread eds emboss encode exif expat faac faad fam fame ffmpeg flac foomaticdb freetype ftp gd geoip ggi gif glut gpm gstreamer gtk gtk2 hardened iconv icq idn imagemagick imap imlib irda java jpeg kde lcms libcaca libg++ libgd libwww lzo mad mailbox maildir mbox md5sum mime mjpeg mmx mmx2 mmxext mng mozilla mp3 mpeg mpeg4 mplayer ncurses network nls nocd nsplugin nvidia ogg oggvorbis ooo-kde openal opengl oscar oss pam pcre pdf pdflib perl php png posix procmail qt quicktime readline real recode rtc sdl sse ssl svg tcltk tcpd tga theora tiff transcode truetype truetype-fonts type1 type1-fonts udev usb uudeview v4l v4l2 vcdimager vhosts virus-scan vorbis win32codecs xine xml2 xmms xprint xv xvid xvmc yv12 zlib linguas_de userland_GNU kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LC_ALL, LDFLAGS

[Comment 1 Kevin F. Quinn (RETIRED) 2006-03-30 09:22:49 UTC]

hmm; stack protection is filtered by the openoffice ebuild; for some reason that filtering is failing for you.

Can you check further back in your build log, see if '-fno-stack-protector' is present on gcc commands?

[Comment 2 Andreas Proschofsky (RETIRED) 2006-04-19 05:00:31 UTC]

Please reopen if you come up with the requested info