Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 702598

Summary: dev-lang/go should build PIE by default
Product: Gentoo Linux Reporter: Doppler <sevener.gentoo>
Component: Current packagesAssignee: William Hubbs <williamh>
Status: UNCONFIRMED ---    
Severity: normal CC: jbuchert+genbug, sam
Priority: Normal Keywords: PATCH
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://github.com/golang/go/issues/36352
Whiteboard:
Package list:
Runtime testing required: ---

Description Doppler 2019-12-12 13:16:09 UTC
While looking through the binaries on my system, I found a small handful of non-PIE binaries, and a majority of them were Go-based. So I looked around and found this patch which appears to enable building binaries with PIE support by default (on all platforms):
https://git.archlinux.org/svntogit/community.git/tree/trunk/default-buildmode-pie.patch?h=packages/go

Would there be any interest in this on Gentoo? I imagine this would be simple to implement as a patch which is applied if a newly introduced "pie" USE flag is set on dev-lang/go

There are a couple of caveats, of course:
1) Go is designed to be memory safe, so unless the unsafe package is used, PIE might not be too important
2) I'm no expert on Go, but there's a non-zero chance that flipping something like this in the toolchain could potentially break *something* down the line in a subtle way
Comment 1 Sergei Trofimovich (RETIRED) gentoo-dev 2020-04-18 16:16:17 UTC
*** Bug 718054 has been marked as a duplicate of this bug. ***