Bug 893468

Summary:	dev-libs/mxml-3.3.1 redefines _FORTIFY_SOURCE (HARDENED-SYSTEM)
Product:	Gentoo Linux	Reporter:	Agostino Sarubbo <ago>
Component:	Current packages	Assignee:	Conrad Kostecki <conikost>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	847148
Attachments:	build.log

Description Agostino Sarubbo gentoo-dev

2023-02-07 08:40:06 UTC

https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: dev-libs/mxml-3.3.1 redefines _FORTIFY_SOURCE (HARDENED-SYSTEM).
Discovered on: amd64 (internal ref: hardened_tinderbox)

NOTE:
(HARDENED-SYSTEM) in the summary means that the bug was found on a machine that runs an hardened profile with -D_FORTIFY_SOURCE=3 and -D_GLIBCXX_ASSERTIONS (https://www.gentoo.org/support/news-items/2023-01-01-hardening-fortify-assertions.html) but this bug MAY or MAY NOT BE related to the changes related to hardened.

Comment 1 Agostino Sarubbo gentoo-dev

2023-02-07 08:40:09 UTC

Created attachment 850056 [details]
build.log

build log and emerge --info

Comment 2 Larry the Git Cow gentoo-dev

2023-04-22 23:53:51 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=caffa1e46a63afc0fe31619027f53c458fc90705

commit caffa1e46a63afc0fe31619027f53c458fc90705
Author:     Conrad Kostecki <conikost@gentoo.org>
AuthorDate: 2023-04-22 23:09:24 +0000
Commit:     Conrad Kostecki <conikost@gentoo.org>
CommitDate: 2023-04-22 23:53:27 +0000

    dev-libs/mxml: don't hardcode FORTIFY_SOURCE
    
    Closes: https://bugs.gentoo.org/893468
    Signed-off-by: Conrad Kostecki <conikost@gentoo.org>

 dev-libs/mxml/{mxml-3.3.1.ebuild => mxml-3.3.1-r1.ebuild} | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b6b552eac786970d03a5d1dd019bab4fd28c2a0f

commit b6b552eac786970d03a5d1dd019bab4fd28c2a0f
Author:     Conrad Kostecki <conikost@gentoo.org>
AuthorDate: 2023-04-22 23:03:44 +0000
Commit:     Conrad Kostecki <conikost@gentoo.org>
CommitDate: 2023-04-22 23:53:26 +0000

    net-ftp/pure-ftpd: Don't hardcode FORTIFY_SOURCE
    
    Closes: https://bugs.gentoo.org/893468
    Signed-off-by: Conrad Kostecki <conikost@gentoo.org>

 .../{pure-ftpd-1.0.51.ebuild => pure-ftpd-1.0.51-r1.ebuild}          | 5 ++++-
 net-ftp/pure-ftpd/pure-ftpd-9999.ebuild                              | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)