Bug 645448

Summary:	net-libs/nodejs does not respect CFLAGS (fno-stack-protector)
Product:	Gentoo Linux	Reporter:	Agostino Sarubbo <ago>
Component:	Current packages	Assignee:	Patrick Lauer <patrick>
Status:	RESOLVED NEEDINFO
Severity:	normal	CC:	jer
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2018-01-23 13:34:20 UTC

While is good for a security purpose, the package does not respect the fno-stack-protector CFLAG
To test, compile it with CFLAGS/CXXFLAGS fno-stack-protector and run:
checksec --file /usr/bin/node

The checksec command line tool is from app-admin/checksec.

Comment 1 Agostino Sarubbo gentoo-dev

2018-01-23 13:37:22 UTC

It is also overwriting the fortify_source flag

Comment 2 Jeroen Roovers (RETIRED) gentoo-dev

2018-01-24 20:52:25 UTC

No build log, no emerge --info output.