| Summary: | =dev-lang/v8-3.6.5.1 fails to compile | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Agostino Sarubbo <ago> |
| Component: | Current packages | Assignee: | Chromium Project <chromium> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | hardened |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: | build.log | ||
|
Description
Agostino Sarubbo
2011-10-15 09:29:06 UTC
Maybe a hardend thing? (In reply to comment #1) > Maybe a hardend thing? From grsec.log: Oct 15 11:18:23 devil kernel: grsec: denied RWX mmap of <anonymous mapping> by /tmp/portage/dev-lang/v8-3.6.5.1/work/v8-3.6.5.1/out/ia32.release/mksnapshot[mksnapshot:7045] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:7043] uid/euid:250/250 gid/egid:250/250 Oct 15 11:18:23 devil kernel: grsec: Segmentation fault occurred at 000000b7 in /tmp/portage/dev-lang/v8-3.6.5.1/work/v8-3.6.5.1/out/ia32.release/mksnapshot[mksnapshot:7045] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:7043] uid/euid:250/250 gid/egid:250/250 disable mprotect(), see pax-utils eclass. Also, is this mksnapshot thingy a test? At least it looks like it is.. As I understand it, mksnapshot builds a "heap image" to enhance v8's performance at startup. We are disabling this for www-client/chromium based on host-is-pax, so I have done the same here. Can you give it another test ago? (In reply to comment #4) > As I understand it, mksnapshot builds a "heap image" to enhance v8's > performance at startup. > > We are disabling this for www-client/chromium based on host-is-pax, so I have > done the same here. > > Can you give it another test ago? Why don't you try to disable mprotect first? (In reply to comment #5) > (In reply to comment #4) > > As I understand it, mksnapshot builds a "heap image" to enhance v8's > > performance at startup. > > > > We are disabling this for www-client/chromium based on host-is-pax, so I have > > done the same here. > > > > Can you give it another test ago? > > Why don't you try to disable mprotect first? mksnapshot is built as a dependency of the main target, so I don't have an opportunity to call pax-mark before the build system executes it. (In reply to comment #4) > Can you give it another test ago? Yes, I'll do Fixed, good job ;) |