Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 551786 - net-dialup/xc fails to compile with format-security
Summary: net-dialup/xc fails to compile with format-security
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Joshua Kinard
URL:
Whiteboard:
Keywords: PMASKED
Depends on:
Blocks: format-security fortify-source
  Show dependency tree
 
Reported: 2015-06-11 14:22 UTC by Agostino Sarubbo
Modified: 2021-09-08 05:35 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
xc-4.3.2-r4:20150611-142027.log (xc-4.3.2-r4:20150611-142027.log,4.77 KB, text/plain)
2015-06-11 14:22 UTC, Agostino Sarubbo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2015-06-11 14:22:22 UTC
This is an auto-filled bug because this package fails to compile with format-security. To reproduce use CFLAGS/CXXFLAGS -Werror=format-security.

Other distros (like Fedora/Debian) build with format-security, so you could find patch(es) in their repository.

Major info at https://fedoraproject.org/wiki/Format-Security-FAQ

Portage 2.2.18 (python 2.7.9-final-0, default/linux/amd64/13.0, gcc-4.8.4, glibc-2.20-r2, 3.2.68-hardened-xxxx-std-ipv6-64 x86_64)
=================================================================
System uname: Linux-3.2.68-hardened-xxxx-std-ipv6-64-x86_64-Intel-R-_Xeon-R-_CPU_E3-1245_V2_@_3.40GHz-with-gentoo-2.2
KiB Mem:    32857376 total,   9740160 free
KiB Swap:          0 total,         0 free
sh bash 4.2_p53
ld ld di GNU (Gentoo 2.24 p1.4) 2.24
app-shells/bash:          4.2_p53::gentoo
dev-java/java-config:     2.2.0::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.9-r1::gentoo, 3.3.5-r1::gentoo
dev-util/cmake:           2.8.12.2-r1::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.13.11::gentoo
sys-apps/sandbox:         2.6-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.11.6-r1::gentoo, 1.13.4::gentoo, 1.14.1::gentoo
sys-devel/binutils:       2.24-r3::gentoo
sys-devel/gcc:            4.7.4::gentoo, 4.8.4::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 3.18::gentoo (virtual/os-headers)
sys-libs/glibc:           2.20-r2::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -Wformat -Werror=format-security -g0 -O2"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.4/ext-active/ /etc/php/apache2-php5.5/ext-active/ /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.4/ext-active/ /etc/php/cgi-php5.5/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cli-php5.4/ext-active/ /etc/php/cli-php5.5/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=native -Wformat -Werror=format-security -g0 -O2 -Wabi -fabi-version=6"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--with-bdeps y --keep-going y -1"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs collision-protect config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news parallel-fetch preserve-libs protect-owned sandbox sfperms sign split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="it_IT.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu"
MAKEOPTS="-j8"
PKGDIR="/root/.pkg"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="X acl amd64 berkdb bzip2 cairo cli consolekit cracklib crypt cxx dbus dri fortran gdbm gudev hwdb iconv icu ipv6 jpeg minizip mmx mmxext modules multilib ncurses nls nptl ogg opengl openmp pam pax_kernel pcre png policykit python qt3support qt4 readline session sse sse2 ssl tcpd unicode vorbis zlib" ABI_X86="64" CPU_FLAGS_X86="mmx mmxext sse sse2" ELIBC="glibc" KERNEL="linux" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="am fil zh af ca cs da de el es et gl hu nb nl pl pt ro ru sk sl sv uk bg cy en eo fo ga he id ku lt lv mk ms nn sw tn zu ja zh_TW en_GB pt_BR ko zh_CN ar en_CA fi kk oc sr tr fa wa nds as be bn bn_BD bn_IN en_US es_AR es_CL es_ES es_MX eu fy fy_NL ga_IE gu gu_IN hi hi_IN is ka kn ml mr nn_NO or pa pa_IN pt_PT rm si sq sv_SE ta ta_LK te th vi ast dz km my om sh ug uz ca@valencia sr@ijekavian sr@ijekavianlatin sr@latin csb hne mai se es_LA fr_CA zh_HK br la no es_CR et_EE sr_CS bo hsb hy mn sr@Latn lb ne bs tg uz@cyrillic xh be_BY brx ca_XV dgo en_ZA gd kok ks ky lo mni nr ns pap ps rw sa_IN sat sd ss st sw_TZ ti ts ve mt ia az me tl ak hy_AM lg nso son ur_PK it fr nb nb_NO hr nan ur tk cs_CZ da_DK de_1901 de_CH en_AU lt_LT pl_PL sa sk_SK th_TH ta_IN tt sco ha mi ven ar_SY el_GR ro_RO ru_RU sl_SI uk_UA vi_VN ar_SY te_IN de_DE es_VE fa_IR fr_FR hu_HU id_ID it_IT ja_JP ka_GE nl_NL sr_BA sr_RS ca_ES fi_FI he_IL jv ru_gold yi eu_ES byn crh gez haw so tig tt@iqtelif wal wo ca_valencia kmr_Latn sid sr_Latn" NGINX_MODULES_HTTP="access auth_basic autoindex browser charset empty_gif fastcgi geo gzip limit_conn limit_req map memcached proxy referer rewrite scgi split_clients ssi upstream_ip_hash userid uwsgi addition auth_pam cache_purge dav dav_ext degradation echo fancyindex flv geoip gunzip gzip_static headers_more image_filter lua metrics mp4 naxsi perl push push_stream random_index realip secure_link security slowfs_cache spdy stub_status sub upload_progress upstream_check xslt ajp auth_request mogilefs sticky" NGINX_MODULES_MAIL="imap pop3 smtp" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_3" QEMU_USER_TARGETS="aarch64 alpha arm armeb cris i386 m68k microblaze microblazeel mips mips64 mips64el mipsel mipsn32 mipsn32el or32 ppc ppc64 ppc64abi32 s390x sh4 sh4eb sparc sparc32plus sparc64 unicore32 x86_64" RUBY_TARGETS="ruby19 ruby20" USERLAND="GNU"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON
Comment 1 Agostino Sarubbo gentoo-dev 2015-06-11 14:22:26 UTC
Created attachment 404966 [details]
xc-4.3.2-r4:20150611-142027.log

build log
Comment 2 Joshua Kinard gentoo-dev 2021-08-09 21:26:50 UTC
I once had an idea to make the unreleased xc-5.0 source and run it through automake/autoconf to give it a usable configure script, but there was perhaps something in my coffee when I had that idea and I never followed up on it.  Upstream is, from what I can tell, dead and the author's domain is no longer registered.  Time for last-rite.
Comment 3 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2021-08-10 05:56:24 UTC
(In reply to Joshua Kinard from comment #2)
> I once had an idea to make the unreleased xc-5.0 source and run it through
> automake/autoconf to give it a usable configure script, but there was
> perhaps something in my coffee when I had that idea and I never followed up
> on it.  Upstream is, from what I can tell, dead and the author's domain is
> no longer registered.  Time for last-rite.

Can you recommend some serial console replacement tooling, infra uses xc w/ serial cables in some cases.
Comment 4 Joshua Kinard gentoo-dev 2021-08-10 06:32:16 UTC
(In reply to Robin Johnson from comment #3)
> (In reply to Joshua Kinard from comment #2)
> > I once had an idea to make the unreleased xc-5.0 source and run it through
> > automake/autoconf to give it a usable configure script, but there was
> > perhaps something in my coffee when I had that idea and I never followed up
> > on it.  Upstream is, from what I can tell, dead and the author's domain is
> > no longer registered.  Time for last-rite.
> 
> Can you recommend some serial console replacement tooling, infra uses xc w/
> serial cables in some cases.

I believe minicom is the supposed gold standard, but I never had luck figuring out its command syntax.  xc certainly is a lot easier, and has some similar semantics to screen or tmux.  Downside is, xc is just unmaintained.  I actually reported a buffer overflow bug to the author back in 2014, and he was shocked that anyone ever ran xc on Linux, as he did not test it on Linux at all.  He made a 5.0 version that, I think, addressed some known issues, but he also wrote his own config/make system from scratch that was rather....esoteric.  I recall having issues making an ebuild for it, but I cannot remember what.

I've had some luck using hardware serial console servers for my SGI setups lately, specifically Perle IOLAN.  I have an SDS4 for a little 4-port unit for one Octane system sitting elsewhere in the house.  Also have an SDS16C for 16 ports that I haven't figured out yet, since the RJ45 --> DB9 connectors I have don't seem to work right on it, but I may have a bad setting or such. It does seem like each of their devices has different DB9 pinouts.  Need to play with it some more.

Here's a link to the xc 5.0 source in my devspace if interested.  Doesn't seem to exist anywhere else anymore, so I made it a public URL for austerity:
https://dev.gentoo.org/~kumba/misc/xc5.0.tar.bz2
Comment 5 Larry the Git Cow gentoo-dev 2021-09-08 05:35:02 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=39c34d0d33945ca3c6f3937ce0d1746acf082495

commit 39c34d0d33945ca3c6f3937ce0d1746acf082495
Author:     Joshua Kinard <kumba@gentoo.org>
AuthorDate: 2021-09-08 05:28:32 +0000
Commit:     Joshua Kinard <kumba@gentoo.org>
CommitDate: 2021-09-08 05:28:32 +0000

    net-dialup/xc: remove last rited package
    
    Closes: https://bugs.gentoo.org/551786
    Closes: https://bugs.gentoo.org/715846
    Signed-off-by: Joshua Kinard <kumba@gentoo.org>

 net-dialup/xc/Manifest                             |   1 -
 net-dialup/xc/files/xc-4.3.2-add-115200.patch      |  12 --
 .../xc/files/xc-4.3.2-fix-set_bps-overflow.patch   |  14 ---
 net-dialup/xc/files/xc-4.3.2-gentoo.patch          | 122 ---------------------
 net-dialup/xc/files/xc-4.3.2-implicit-decl.patch   |  22 ----
 net-dialup/xc/metadata.xml                         |  12 --
 net-dialup/xc/xc-4.3.2-r5.ebuild                   |  44 --------
 7 files changed, 227 deletions(-)