1. Forum
  2. Usenet
  3. LINUX.DEBIAN.MAINT.DPKG

  • Bug#918914: add -fstack-clash-protection to default buildflags

    From Moritz =?UTF-8?Q?M=C3=BChlenhoff?=@1:229/2 to All on Wed Jun 21 18:10:01 2023
    XPost: linux.debian.bugs.dist
    From: [email protected]

    Am Fri, May 27, 2022 at 09:48:05AM +0200 schrieb Guillem Jover:
    I don't think the issues presented by Florian were ever resolved, so
    my concerns in https://bugs.debian.org/918914#15 would still apply,
    even though Ubuntu has enabled this, but they have a different set of architectures.

    I worked with Lucas last month who made an archive rebuild on amd64, the list of FTBFSes is very small: http://qa-logs.debian.net/2023/05/24/

    Since dpkg-buildflags supports different flags per arch, my proposal to be posted to debian-devel would be to initially enable this for amd64 only
    and solicit feedback from porters for other archs. Based on their feedback
    this can then be enabled for amd64 and the other archs deemed compatible.

    Cheers,
    Moritz

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)
  • From Guillem Jover@1:229/2 to All on Fri Jun 23 01:10:01 2023
    XPost: linux.debian.bugs.dist
    From: [email protected]

    Hi!

    On Wed, 2023-06-21 at 17:57:41 +0200, Moritz Mühlenhoff wrote:
    Am Fri, May 27, 2022 at 09:48:05AM +0200 schrieb Guillem Jover:
    I don't think the issues presented by Florian were ever resolved, so
    my concerns in https://bugs.debian.org/918914#15 would still apply,
    even though Ubuntu has enabled this, but they have a different set of architectures.

    I worked with Lucas last month who made an archive rebuild on amd64, the list of FTBFSes is very small: http://qa-logs.debian.net/2023/05/24/

    Ah, that looks pretty good, thanks.

    Since dpkg-buildflags supports different flags per arch, my proposal to be posted to debian-devel would be to initially enable this for amd64 only
    and solicit feedback from porters for other archs. Based on their feedback this can then be enabled for amd64 and the other archs deemed compatible.

    Ack, I'm happy to add these once this has been brought up on d-devel.

    Thanks,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)
  • From Martin Uecker@1:229/2 to [email protected] on Fri Aug 4 09:10:01 2023
    XPost: linux.debian.bugs.dist
    From: [email protected]

    On Wed, 21 Jun 2023 17:57:41 +0200 =?UTF-8?Q?Moritz_M=C3=BChlenhoff?= <[email protected]> wrote:
    Am Fri, May 27, 2022 at 09:48:05AM +0200 schrieb Guillem Jover:
    I don't think the issues presented by Florian were ever resolved, so
    my concerns in https://bugs.debian.org/918914#15 would still apply,
    even though Ubuntu has enabled this, but they have a different set of architectures.

    I worked with Lucas last month who made an archive rebuild on amd64, the list of FTBFSes is very small: http://qa-logs.debian.net/2023/05/24/

    Since dpkg-buildflags supports different flags per arch, my proposal to be posted to debian-devel would be to initially enable this for amd64 only
    and solicit feedback from porters for other archs. Based on their feedback this can then be enabled for amd64 and the other archs deemed compatible.


    Is there an upstream bug report for the GCC issue affecting
    wine and gdb-mingw-64 ?

    Martin

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)
  • From Emanuele Rocca@1:229/2 to Guillem Jover on Wed Aug 16 11:10:01 2023
    XPost: linux.debian.bugs.dist
    From: [email protected]

    Hi!

    On 2019-01-29 09:56, Guillem Jover wrote:
    Given its arch-dependent behavior this might need more exposure than a
    simple rebuild on say amd64. Enabling this at the beginning of a
    release cycle might seem more appropriate.

    Lucas performed a full archive rebuild on arm64 with -fstack-clash-protection and the results look good:
    http://qa-logs.debian.net/2023/08/11.stackclash-arm/

    Please enable -fstack-clash-protection on arm64 too.

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)