From patchwork Wed Jun 28 16:04:14 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106544 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3715478obb; Wed, 28 Jun 2017 09:05:31 -0700 (PDT) X-Received: by 10.84.164.193 with SMTP id l1mr12402732plg.243.1498665931243; Wed, 28 Jun 2017 09:05:31 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665931; cv=none; d=google.com; s=arc-20160816; b=jDMbdzay2bcB+eiAL5HOtaQuwX/Yxf6Iw6eitOqZsPh8nyrPC5/hWFBHcErGDAjBxj XtCxTek2f4Y6s9076lIg5TrKydsUOHQz01NnpImVA8EJ7JMW0aivFbmkPnA7fXvlvr1x pjcvWN4YcUqB0VwWe/299pN+2JrfXwlu6H3ciMIZgrtXKH9N7edGUIFtVK17bNCseHXY N/+VEvc3VAhtZpP1agkQvyanBDWO3HUqUe3G58GGA1vcyT1+UKszj0D9S/AxTYJ3MKD1 YX9MMJwOwExCW6CkGUrt0fKypc/WEERntSrX9vCAQZrUf1sXan4VaPz4x5i0s/rR9a2R yEWw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=f9Y4cvb9DmiGY6uuxwj21pA3ywM37932v1jNHAk5O3o=; b=wk9+N11yjn3ojUIAqjnyX2VnGRyOSA91hG83Nw1ljNf5ru/72/RX2R8AMQLdM1piMR c79bAeoOUZsR8EArkYcM6hGNi8u2eeuJbK0rbE+pwBN8X+R9pz3GFT99tthTX8GtFj/M y+bJDfIf1yy1STsfk9pgkZKE2hn+MZa5F/JE4T1Adp2O1QRJUelaFfUpsBkSMugizVAb +81ChY8aYy0VW9FdEXPrii5UwAtlQo/dLGXqsmkuk1svNgwQM32q8OLUsxYFJMGxlxBX BmYiKZnH+SHJlZA9xQmTYZBRn2wacn+HQDvtNLLSPdURPUVLEuHxtcECOKRT+EK3swmS nPJQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=tqhfWCZE; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id o24si1820825pgn.99.2017.06.28.09.05.30; Wed, 28 Jun 2017 09:05:31 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=tqhfWCZE; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id C47D577FF9; Wed, 28 Jun 2017 16:05:28 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f67.google.com (mail-pg0-f67.google.com [74.125.83.67]) by mail.openembedded.org (Postfix) with ESMTP id 4F5A277FF6 for ; Wed, 28 Jun 2017 16:04:35 +0000 (UTC) Received: by mail-pg0-f67.google.com with SMTP id j186so8715949pge.1 for ; Wed, 28 Jun 2017 09:04:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=1N+2dhs28SnuvFCty7CEt3Go0xzLoY4ZxXyhiIy573k=; b=tqhfWCZENYk+hbAkyGZuCA01p7sJO0IJEhN2Lkp2QGZzLHeKOti4nRceXeJk2taLTh rN+7uek2PJud2tzA+VjEMXl095zgw9SRajPej9bY5A6KpdpiHNlK6fcutM2bKn1FWvuw x76eVKWkYlFbL7tpshybi/lGoUeEC8kBAO4VfK0UKKgyjgIIgjZixXI9jutr4cC0I6LL NsvLNIStCwcv32rF2z6SWgGn55HBMRVUU3oFPPnNXnOEENNBI3EddFSD3RD5YIQTSirA r+zLSJVe50rSJKLwrK4Vs0+hy92YZOAC6xWmmkJv8aGAUnTQovSSKXDxgii2n5QbIgID wn+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=1N+2dhs28SnuvFCty7CEt3Go0xzLoY4ZxXyhiIy573k=; b=MMey4Kz6+gLpbaWOEoZHVCH6iFbBMZUWbEmchSGaIZtJzN97CmNnnEIrzxYdAF+qei T1fYgvLoyrJ6R14E4KtgxGAtCWs4dP+8TxdPLCDtkIHoiCyzUBa/UK4bvN3oFPzcDIyR O4Zg2WQ0nWOmI9V3HWvbfAYn2HuhP5T4SqnBemJgfWQZDoOL3tviLRaNMTj2Dqjz2CN6 lW02CoYq8I4HU2fFnHl9mICuS9KULOaJ/loVEAmk3YFcUWV1ml8H2QYCISgJSGegZ0Zx A9oOvhhRzM3iZd0trHqbZwFmfq3xCVZfHbSFrzeZRmRBJIhc/CK7zER3x4B3qj1Kz2Dr bIeg== X-Gm-Message-State: AKS2vOw3rHGO87wElV1aqHEDqbVrdM78uQaapZXtB+YEH/k5XrHO0Gu2 mqbfbyhHZL+x/1l3 X-Received: by 10.84.128.69 with SMTP id 63mr12412962pla.54.1498665876924; Wed, 28 Jun 2017 09:04:36 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:35 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:14 -0700 Message-Id: X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 01/10] gcc: Introduce a knob to configure gcc to default to PIE X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org GCCPIE flag which is empty by default adds "--enable-default-pie" configure option for harderned distros We do not require to add -fpie -pie flag externally anymore Signed-off-by: Khem Raj --- meta/conf/distro/include/security_flags.inc | 4 +++- meta/recipes-devtools/gcc/gcc-configure-common.inc | 3 +++ 2 files changed, 6 insertions(+), 1 deletion(-) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index 38164d08b8..f2eb224a77 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -5,6 +5,8 @@ # From a Yocto Project perspective, this file is included and tested # in the DISTRO="poky-lsb" configuration. +GCCPIE ?= "--enable-default-pie" + # _FORTIFY_SOURCE requires -O1 or higher, so disable in debug builds as they use # -O0 which then results in a compiler warning. lcl_maybe_fortify = "${@base_conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE=2',d)}" @@ -12,7 +14,7 @@ lcl_maybe_fortify = "${@base_conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE # Error on use of format strings that represent possible security problems SECURITY_STRINGFORMAT ?= "-Wformat -Wformat-security -Werror=format-security" -SECURITY_CFLAGS ?= "-fstack-protector-strong -pie -fpie ${lcl_maybe_fortify} ${SECURITY_STRINGFORMAT}" +SECURITY_CFLAGS ?= "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_STRINGFORMAT}" SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_STRINGFORMAT}" SECURITY_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro,-z,now" diff --git a/meta/recipes-devtools/gcc/gcc-configure-common.inc b/meta/recipes-devtools/gcc/gcc-configure-common.inc index 63fa1d9686..e2ce234aa1 100644 --- a/meta/recipes-devtools/gcc/gcc-configure-common.inc +++ b/meta/recipes-devtools/gcc/gcc-configure-common.inc @@ -22,6 +22,8 @@ EXTRA_OECONF_INITIAL ?= "" GCCMULTILIB ?= "--disable-multilib" GCCTHREADS ?= "posix" +GCCPIE ??= "" + EXTRA_OECONF = "\ ${@['--enable-clocale=generic', ''][d.getVar('USE_NLS') != 'no']} \ --with-gnu-ld \ @@ -29,6 +31,7 @@ EXTRA_OECONF = "\ --enable-languages=${LANGUAGES} \ --enable-threads=${GCCTHREADS} \ ${GCCMULTILIB} \ + ${GCCPIE} \ --enable-c99 \ --enable-long-long \ --enable-symvers=gnu \ From patchwork Wed Jun 28 16:04:15 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106545 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3715540obb; Wed, 28 Jun 2017 09:05:35 -0700 (PDT) X-Received: by 10.98.160.28 with SMTP id r28mr11620132pfe.86.1498665935861; Wed, 28 Jun 2017 09:05:35 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665935; cv=none; d=google.com; s=arc-20160816; b=Ftb51yq17Ar4fv2dAu+hOrNE17fKBXvJVyGN9F4PGlELvHL0Z3oxIEM1uRt9EkUfsB O0spW27XcZMCNXpuGiRKKTUM7Buk3uivHo+GqG0MZFkUuqXj0a/Eeu43mzQDWmFA3BEZ 3ruJUVV6kbVHwIx1+/aXbWNFX5hsn91JWkKLKMQBatoUKIG4t3yMh4OuJOilNy9YBGZF CM/mhk0tBgje9GGhJaZY7thR1qycPEIi2DNUXH3SUVyNFWlJEZwFmEPSVfK/s0QhANcj lR0nmwJ8wmOHVKn5Y/muCVwNXc7vp9LgXLNbBA1enFxeh5vNcEkX/Yf53NcCwwKifGJQ 58JA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=39zCz+z7gIQp90dXvyL8Y7inq1aPlC9+CFcm618mW4Q=; b=RAzQ7UPJr2/sFx73kBnyw76//F3YbK05qpmAgIu7i6DA3WYN3VuO/7s6yGqJvTEwIu HW3UWgu561ZbS74OJhYWtrdDjurZRJqmcfyB3axvfkir6SprEeyid8di18etB8+hqbun tXq2vDKlKbG1dXvC7BuvgeI0cFkQSCip82NOKfA2KzcC5sonK1eGSJhMKVYcKS3TVWnl Wi0ThcF9XW719Odqy6eRwXoBxW7WlVdAn8ZkHshToQ+hZHT82HDcH9vGvaEJyJ2u9sf8 S4HcUAnLWQS7NAmDZ9KJotUpdBnB8Rseo3zW9JUt/CaFDXj2ZO+glxnEfnsDQiPH7E7P +qpg== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=TaUULPpJ; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id f6si2160882pln.84.2017.06.28.09.05.35; Wed, 28 Jun 2017 09:05:35 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=TaUULPpJ; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id D046978088; Wed, 28 Jun 2017 16:05:29 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pf0-f193.google.com (mail-pf0-f193.google.com [209.85.192.193]) by mail.openembedded.org (Postfix) with ESMTP id C80E277FF6 for ; Wed, 28 Jun 2017 16:04:37 +0000 (UTC) Received: by mail-pf0-f193.google.com with SMTP id z6so9590638pfk.3 for ; Wed, 28 Jun 2017 09:04:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=7SQ1mMBoGpjyAOSoeXlIVNO3A25PR+wlrJ6UbwOSRYg=; b=TaUULPpJaLt5iZ51l0RqaIo1xEBYC64hX8I3zf163ftMip7T1NhKXj+WdFnoysAxE+ duRs+3Ji2anv0bL9mIbsJzdo2t6eCW1rLXwGF01HcExXmViHKJotfVPKQArSa5AD3xrd di7trYPYmplgljzSSRlOBFY/uMTcTjR1BztXy8LGdQuW9pOB73YsqORcrEO5M5pqSmqL Nuq08dm3F+FFAoZ5mPEMeRCXirLj8YD9H70Y0a8zixLqYfyyWSYy8uhodbJ7nxR8pJ+D Hsifu9K73R8hMr3WXPbA4qsOQDe97EnWOSJFZAZve6jMqfu5qbq6uRs7+59uNjrG8I25 1lig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=7SQ1mMBoGpjyAOSoeXlIVNO3A25PR+wlrJ6UbwOSRYg=; b=RNLu41oO0Iw1Prb4XX58xfDhzhknKqPYJ0lU72FwRaIA6g8b6A0+w42I7yJmbKAowe cSOcmooobfrgjMNszvjyYa5n2+IqznVgJK7+FoNM4zScCo8DXoPiy0QOm6twcIS1OF/k V+fXtod0+NFh5q4tgaSqu4OnAgWA9w1ElF7pZaou8H0rFzOXARYpm3FqEiwMGA51YO/T Zr9PX7L09FiQqRs2/+sO32A6CaKcgAnAKeK9/RC+aCmOgUC7XT5vkTbCMhSy6w86stks uTG1pJHP+ou7kxOLIDhblY9EEGP7i65w2h7NmS4Wwks3mKRUN7N1Co2NAbQTsbijSaFc 5dAg== X-Gm-Message-State: AKS2vOydmhBobc7ruyEKvI2+LoC2ywzmERom7PJgoBTt+AevH4EsR86q NBa6PPljrfjy/1xV X-Received: by 10.84.130.98 with SMTP id 89mr12449369plc.222.1498665878663; Wed, 28 Jun 2017 09:04:38 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:37 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:15 -0700 Message-Id: <1255656a5626f4ceb33004ff520c33e38d293bf7.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 02/10] security_flags.inc: Delete pinnings for SECURITY_NO_PIE_CFLAGS X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org GCC is configured correctly to pass PIE cflags/ldflags Signed-off-by: Khem Raj --- meta/conf/distro/include/security_flags.inc | 81 +++++++---------------------- 1 file changed, 20 insertions(+), 61 deletions(-) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/conf/distro/include/security_flags.inc b/meta/conf/distro/include/security_flags.inc index f2eb224a77..64122d4ebe 100644 --- a/meta/conf/distro/include/security_flags.inc +++ b/meta/conf/distro/include/security_flags.inc @@ -1,4 +1,4 @@ -# Setup extra CFLAGS and LDFLAGS which have 'security' benefits. These +# Setup extra CFLAGS and LDFLAGS which have 'security' benefits. These # don't work universally, there are recipes which can't use one, the other # or both so a blacklist is maintained here. The idea would be over # time to reduce this list to nothing. @@ -14,87 +14,43 @@ lcl_maybe_fortify = "${@base_conditional('DEBUG_BUILD','1','','-D_FORTIFY_SOURCE # Error on use of format strings that represent possible security problems SECURITY_STRINGFORMAT ?= "-Wformat -Wformat-security -Werror=format-security" -SECURITY_CFLAGS ?= "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_STRINGFORMAT}" +# Inject pie flags into compiler flags if not configured with gcc itself +# especially useful with external toolchains +SECURITY_PIE_CFLAGS ?= "${@'' if '${GCCPIE}' else '-pie -fPIE'}" + +SECURITY_NOPIE_CFLAGS ?= "-no-pie -fno-PIE" + +SECURITY_CFLAGS ?= "-fstack-protector-strong ${SECURITY_PIE_CFLAGS} ${lcl_maybe_fortify} ${SECURITY_STRINGFORMAT}" SECURITY_NO_PIE_CFLAGS ?= "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_STRINGFORMAT}" SECURITY_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro,-z,now" SECURITY_X_LDFLAGS ?= "-fstack-protector-strong -Wl,-z,relro" # powerpc does not get on with pie for reasons not looked into as yet -SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify}" -# Deal with ppc specific linker failures when using the cflags -SECURITY_CFLAGS_pn-dbus_powerpc = "" -SECURITY_CFLAGS_pn-dbus-ptest_powerpc = "" -SECURITY_CFLAGS_pn-libmatchbox_powerpc = "" +SECURITY_CFLAGS_powerpc = "-fstack-protector-strong ${lcl_maybe_fortify} ${SECURITY_NOPIE_CFLAGS}" +SECURITY_CFLAGS_pn-libgcc_powerpc = "" # arm specific security flag issues -SECURITY_CFLAGS_pn-lttng-tools_arm = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-aspell = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-beecrypt = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-coreutils = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-cups = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-db = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-directfb = "${SECURITY_NO_PIE_CFLAGS}" SECURITY_CFLAGS_pn-glibc = "" SECURITY_CFLAGS_pn-glibc-initial = "" -SECURITY_CFLAGS_pn-elfutils = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-enchant = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-expect = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-flac = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-gcc = "${SECURITY_NO_PIE_CFLAGS}" SECURITY_CFLAGS_pn-gcc-runtime = "" -SECURITY_CFLAGS_pn-gcc-sanitizers = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-gdb = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-gmp = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-gnutls = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-gpgme = "${SECURITY_NO_PIE_CFLAGS}" SECURITY_CFLAGS_pn-grub = "" SECURITY_CFLAGS_pn-grub-efi = "" SECURITY_CFLAGS_pn-grub-efi-native = "" SECURITY_CFLAGS_pn-grub-efi-x86-native = "" SECURITY_CFLAGS_pn-grub-efi-i586-native = "" SECURITY_CFLAGS_pn-grub-efi-x86-64-native = "" -SECURITY_CFLAGS_pn-gstreamer1.0-plugins-bad = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-gstreamer1.0-plugins-good = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-harfbuzz = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-kexec-tools = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-iptables = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libaio = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libcap = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libgcc = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libid3tag = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libnewt-python = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libglu = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libpcap = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libpcre = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-libproxy = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-mesa = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-mesa-gl = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-openssl = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-opensp = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-ppp = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python-pycurl = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python-numpy = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python3-numpy = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python3-pycairo = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python3-pycurl = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python3-pygpgme = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-python3 = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-syslinux = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-slang = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-source-highlight = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-tcl = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-tiff = "${SECURITY_NO_PIE_CFLAGS}" -SECURITY_CFLAGS_pn-valgrind = "" -SECURITY_CFLAGS_pn-zlib = "${SECURITY_NO_PIE_CFLAGS}" + +SECURITY_CFLAGS_pn-mkelfimage_x86 = "" + +SECURITY_CFLAGS_pn-valgrind = "${SECURITY_NOPIE_CFLAGS}" +SECURITY_LDFLAGS_pn-valgrind = "" # Recipes which fail to compile when elevating -Wformat-security to an error SECURITY_STRINGFORMAT_pn-busybox = "" SECURITY_STRINGFORMAT_pn-gcc = "" -SECURITY_STRINGFORMAT_pn-oh-puzzles = "" -TARGET_CFLAGS_append_class-target = " ${SECURITY_CFLAGS}" +TARGET_CC_ARCH_append_class-target = " ${SECURITY_CFLAGS}" TARGET_LDFLAGS_append_class-target = " ${SECURITY_LDFLAGS}" SECURITY_LDFLAGS_remove_pn-gcc-runtime = "-fstack-protector-strong" @@ -108,4 +64,7 @@ SECURITY_LDFLAGS_pn-xf86-video-vesa = "${SECURITY_X_LDFLAGS}" SECURITY_LDFLAGS_pn-xf86-video-vmware = "${SECURITY_X_LDFLAGS}" SECURITY_LDFLAGS_pn-xserver-xorg = "${SECURITY_X_LDFLAGS}" -TARGET_CC_ARCH_append_pn-binutils = " ${SECURITY_CFLAGS} ${SELECTED_OPTIMIZATION}" +TARGET_CC_ARCH_append_pn-binutils = " ${SELECTED_OPTIMIZATION}" +TARGET_CC_ARCH_append_pn-gcc = " ${SELECTED_OPTIMIZATION}" +TARGET_CC_ARCH_append_pn-gdb = " ${SELECTED_OPTIMIZATION}" +TARGET_CC_ARCH_append_pn-perf = " ${SELECTED_OPTIMIZATION}" From patchwork Wed Jun 28 16:04:16 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106546 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3715623obb; Wed, 28 Jun 2017 09:05:40 -0700 (PDT) X-Received: by 10.98.245.207 with SMTP id b76mr11675320pfm.113.1498665940293; Wed, 28 Jun 2017 09:05:40 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665940; cv=none; d=google.com; s=arc-20160816; b=qKF4hYkACg8jQnd7hvAMduGvwk9DPKa3/kN5kxBf/g5NEiYz9A0NwLfhwLEc/zvtW6 Ab4vPTloyF2uMSiZKfyMfPKlWVPMlMAmpV6GZlGSTBADQ/5W8+7o4Kz5f0jsylbk3Q8p TIEC4h0Y+iT5bLhLIZ1Q8my2nkw2wJYArAFjk9qCTpdsv6PLFlbt/yCen/viKdj1oZG2 CYfMHVBgqVVM+2LpKJaZVCMvmgNX4IStiCwhSN7MNPg3v6nphlejW1Ydl+CsZGtoZhm0 CuCH6BXA8JF77wz7RK/R5kd2H0a1J1eh3fT1WM44ak5ceaNIGzNgbUILIfTUdnOpoIcr QIvg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=sKdFqZv0wAhxsVXrV8441K0U4m+ut7IumZ4gGo7wkbA=; b=SgWbJFEiHdbyqxkiYI9wRuOJrJdkV9sOu2MX1yCzIO4Jq4CYdf+/6/IVSNftEhmOqI m0oBjTDhPLbhTJviHXbc3VSQO+0/K+rEcf7eCLUVKBXYaVYV4cAcFmyeTYRyn4QmGTa0 oeOsPe12VygH7ldLC15BRyF8mRfFJmaRH/2a3ZsX04ha+H8RvwR0gzw64OB8p37GG9/1 75xMvTRAB7r50anntr+3OW4+AouK5Tt0PS/2a/REJ5biOQBpbG/gnr/9niImVVvvr+2V c1F0+ZWqEBLh7NnJpHNfxPtpKAZg+cwQPWJLgdagI8soIWIGERCYVUvxLgrfA/ofMxJy r/eg== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=FTICJYhg; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id d2si1829904pfg.316.2017.06.28.09.05.39; Wed, 28 Jun 2017 09:05:40 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=FTICJYhg; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 392D77809C; Wed, 28 Jun 2017 16:05:31 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pf0-f194.google.com (mail-pf0-f194.google.com [209.85.192.194]) by mail.openembedded.org (Postfix) with ESMTP id 687D577DC8 for ; Wed, 28 Jun 2017 16:04:39 +0000 (UTC) Received: by mail-pf0-f194.google.com with SMTP id s66so9580984pfs.2 for ; Wed, 28 Jun 2017 09:04:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=wu88WV9IrzUiSshi7RI6V17GvK5x9pqwacP8Eoo6Gtw=; b=FTICJYhg4gxrSPdwLV8FHOiD5f+LGedLgOziOJmoFoXaWSvUd0rxDfYtGoHKT0CNgs D6t6a4CYFgrOgFehyw+p1ejLl8KGGwAGNIfPXc1ZxIsXAh6abXO97JgV3FiGzbjBexRj nlZpRsaQRHTdWDCpNjjS+5yxb+B5EvtYswyrX84RjHEWQjXKlnQSbGRK0k7Vfol20mMS Q4Xic6dI8Q7Ee/X//aS6fXkzC0XP4ALU5mBmFS60H4MtB7/di/QLY5HfL1Zs72yMGjfp hLmtmKdEqszkoLUnsVF6ssRHa9itZVuyigbd3JkXfrxNqYtV/HdMThCbSaQsNaAE0sr6 V3PQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=wu88WV9IrzUiSshi7RI6V17GvK5x9pqwacP8Eoo6Gtw=; b=q+gurBWiXrFqOgp8v0eS/7liZSoEOPHZXYKaFSFD1qCKzRQouqmKND1BhGWiqH3Xw6 X2EOC8ayivmVchm6ggNnSY3WRA90xBdu9V1fUiqXVmotg0L7X46jJUM1C9ByCMDEHeqG F/BA/ziw17nK92dXoms3SCAtlM8lKGAZ1Byi45ulJmiwEJ/pnCagH0sKiy5ULqraOWe3 Da9zY/RZW/5LE1Dms8cE7zmacWuQPtSuQM9HJ75TkepZMR0ZSisvi+Si+l4nYbMqd1pI RivGzYhVN9OoUy3l3e/kVDwFEk3wix8jzSVrixxmLl3rGAVLDSnYnjbcK2tIxhmEM+DF 8mqA== X-Gm-Message-State: AKS2vOxYjiC2OXovWuwByinJI224yFCN8PCUzxmucc0NshEmcbDTycgO +AektjJde+T+ss2r X-Received: by 10.99.177.78 with SMTP id g14mr11402603pgp.131.1498665880058; Wed, 28 Jun 2017 09:04:40 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.38 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:39 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:16 -0700 Message-Id: <6d3bee81e7ddaa5548ea4588e87c14b2799ba1fd.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 03/10] distutils, setuptools: Delete use of SECURITY_NO_PIE_CFLAGS X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org gcc can handle PIE in gcc driver Signed-off-by: Khem Raj --- meta/classes/distutils-common-base.bbclass | 2 -- meta/classes/setuptools.bbclass | 2 -- 2 files changed, 4 deletions(-) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/classes/distutils-common-base.bbclass b/meta/classes/distutils-common-base.bbclass index fa733c672c..824a1b68b1 100644 --- a/meta/classes/distutils-common-base.bbclass +++ b/meta/classes/distutils-common-base.bbclass @@ -11,5 +11,3 @@ FILES_${PN}-dev += "\ ${libdir}/pkgconfig \ ${PYTHON_SITEPACKAGES_DIR}/*.la \ " - -SECURITY_CFLAGS = "${SECURITY_NO_PIE_CFLAGS}" diff --git a/meta/classes/setuptools.bbclass b/meta/classes/setuptools.bbclass index 7d0c5267d7..56343b1c73 100644 --- a/meta/classes/setuptools.bbclass +++ b/meta/classes/setuptools.bbclass @@ -6,5 +6,3 @@ DISTUTILS_INSTALL_ARGS = "--root=${D} \ --prefix=${prefix} \ --install-lib=${PYTHON_SITEPACKAGES_DIR} \ --install-data=${datadir}" - -SECURITY_CFLAGS = "${SECURITY_NO_PIE_CFLAGS}" From patchwork Wed Jun 28 16:04:17 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106547 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3715687obb; Wed, 28 Jun 2017 09:05:45 -0700 (PDT) X-Received: by 10.84.229.77 with SMTP id d13mr12883186pln.239.1498665945244; Wed, 28 Jun 2017 09:05:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665945; cv=none; d=google.com; s=arc-20160816; b=rBa11pEZY3d0B/UngAwCKfgwG9T4CY7PYuNWMHVPzGD4YLzBBNdzooSw+S+r4s0Qu0 WV0H5RbjC461Dq0v7I2exsvRFR/48VBtMvKBfz8KPrTz6jXwMaddYC8KJ9/cwjej5U4W D8QOO0OJATnv8Dux/OuMpppxP00Lybbcy4v/TcH+prvtonjXWhRrEE9efPEfwtEc5J4G TOgsYoPQ8mT2+QhMwOx0EqpTuZfHeQ6vAjPrsATCpntgD0t/5Dced56QPXwRZO/ErPAh NI69zUeRndaeL0P8IoHeJueR2O7DCPHhHG1D6M8ZtS14QLr51I9dNBy/NzW5t3hBVU82 DgzA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=JwKbkKZw1b2PRpUeEP6BzX4v9J3N2XqJyRKYXBpWrLs=; b=UIiawY3dAQm/wsIJrylVqTaEpC0kW8HQG/8TAypn/pTrQ40YfAmgQeBpcHwvdhAH0b rExKgokMPpUYvY+qOPUJ1aBpUiEyOQ3gMu4qxaUaYwsLty64jTZnhn/tVlCDPJ5DMZ3/ ctg6XgfG34O4GL4nQ9zXe0N3oWlBJMylp5Y7EF8NjNfm9VDXzkrBux2JgkUE5uuCiaBq in0BL2TEcu6vjTpdfgiRTJwuSDicejm+UY4Hs+WfUXulWtuTm9HMMoE2n/509f8EilfX c6i5FrUAdTkRsKCEAmf53oas6RZPkelBHRm6YpJ7rsbohZAM0nbpxYrXOejL8Z0QCiHN s+6Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=PHA9XKGs; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id 62si1984233plc.592.2017.06.28.09.05.44; Wed, 28 Jun 2017 09:05:45 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=PHA9XKGs; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 3761C780AA; Wed, 28 Jun 2017 16:05:32 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pf0-f174.google.com (mail-pf0-f174.google.com [209.85.192.174]) by mail.openembedded.org (Postfix) with ESMTP id B6FC977FF6 for ; Wed, 28 Jun 2017 16:04:41 +0000 (UTC) Received: by mail-pf0-f174.google.com with SMTP id q86so35669583pfl.3 for ; Wed, 28 Jun 2017 09:04:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=MyXxFFTqsgC4/nC0ZOJZkbcdQpfgko0LLk/6HidsIxo=; b=PHA9XKGs7zsk1wjanAd5x1FOj1/9vio/wQOr1NjLhwTgrnEnqA6B6TNmUIFl1PJJmn GnmWNk8vbiQLNr7QKXgnVJ8gQ3lyBSXYk4Td5gcQHv9CBK/9vu+vvqjZ690b7mbaTi/7 2/3TvPAzQMPb+sivgJL/8ocwHMyjHMAG2F5EMFu8lkLBzjgJvOMuUu+RmnV3jvRZNxo5 LZBU1iqaMuyIURf6rCxsyJiMFiq3pGXm4L8p981A9wiNSsYy9hOZmhH8HU5WIrJ+tEiD K4yF2lRvYWdxiK8KbXBDrFAPc/q5ZnQLVIKT3dDE/vUvFO3JQAgaqx02QhotUhF+RD5B 9D5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=MyXxFFTqsgC4/nC0ZOJZkbcdQpfgko0LLk/6HidsIxo=; b=tm4684lLOk2cfQVXZrvAr3h6cmCMIGkxlg471l2zn/9SnJ02bAbQNjiX3NYI6ROkYv j6QATCTDUP/ivcZ7uULfRAUsbUsUh3YnrGjZoH8ohhz9/loBsG8S5OlDxgcGnHkuFY6+ Ylu+Ciueb2q+Y3f98tcb8FvKnNDBTdvybL69hrMNWUrgpIRO7Be1nNWs9+BXfbFhFLUq vYCJD9HEXDQVdFXbvBwcZrIWIXxNTDVyu10nX1u1oMUNUfSmn90L+y9hf8dfiDJKrlIl 9MSLn3koEnsWsVIV/Kb8XwM1rdf7lMfX/Y9fEuAEvz70Ep7xTMadEy5NC8iavaTBgHlW OIyQ== X-Gm-Message-State: AKS2vOy3lYIOvTF9/y2IsH/ek9MRanDQGgnQePf0CitgCnJ3My8jSGTa Fa8xdtkNuH7hIEe3 X-Received: by 10.99.2.146 with SMTP id 140mr10991129pgc.56.1498665882389; Wed, 28 Jun 2017 09:04:42 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:40 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:17 -0700 Message-Id: <0eaf46b1f0732b8a2ddd6355c469a7474e5442b9.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 04/10] gcc7: Enable static PIE X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Signed-off-by: Khem Raj --- meta/recipes-devtools/gcc/gcc-7.1.inc | 1 + .../gcc/gcc-7.1/0048-gcc-Enable-static-PIE.patch | 37 ++++++++++++++++++++++ 2 files changed, 38 insertions(+) create mode 100644 meta/recipes-devtools/gcc/gcc-7.1/0048-gcc-Enable-static-PIE.patch -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-devtools/gcc/gcc-7.1.inc b/meta/recipes-devtools/gcc/gcc-7.1.inc index 4098d6a2c1..b52d51fba6 100644 --- a/meta/recipes-devtools/gcc/gcc-7.1.inc +++ b/meta/recipes-devtools/gcc/gcc-7.1.inc @@ -72,6 +72,7 @@ SRC_URI = "\ file://0045-Link-libgcc-using-LDFLAGS-not-just-SHLIB_LDFLAGS.patch \ file://0046-libgcc_s-Use-alias-for-__cpu_indicator_init-instead-.patch \ file://0047-sync-gcc-stddef.h-with-musl.patch \ + file://0048-gcc-Enable-static-PIE.patch \ ${BACKPORTS} \ " BACKPORTS = "\ diff --git a/meta/recipes-devtools/gcc/gcc-7.1/0048-gcc-Enable-static-PIE.patch b/meta/recipes-devtools/gcc/gcc-7.1/0048-gcc-Enable-static-PIE.patch new file mode 100644 index 0000000000..879e360cf3 --- /dev/null +++ b/meta/recipes-devtools/gcc/gcc-7.1/0048-gcc-Enable-static-PIE.patch @@ -0,0 +1,37 @@ +From 44ef80688b56beea85c0070840dea1e2a4e34aed Mon Sep 17 00:00:00 2001 +From: Khem Raj +Date: Tue, 13 Jun 2017 12:12:52 -0700 +Subject: [PATCH 49/49] gcc: Enable static PIE + +Static PIE support in GCC +see +https://gcc.gnu.org/ml/gcc/2015-06/msg00008.html + +Upstream-Status: Pending + +Signed-off-by: Khem Raj +--- + gcc/config/gnu-user.h | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/gcc/config/gnu-user.h b/gcc/config/gnu-user.h +index 2787a3d16be..ee7b781319e 100644 +--- a/gcc/config/gnu-user.h ++++ b/gcc/config/gnu-user.h +@@ -51,10 +51,10 @@ see the files COPYING3 and COPYING.RUNTIME respectively. If not, see + #if defined HAVE_LD_PIE + #define GNU_USER_TARGET_STARTFILE_SPEC \ + "%{!shared: %{pg|p|profile:gcrt1.o%s;: \ +- %{" PIE_SPEC ":Scrt1.o%s} %{" NO_PIE_SPEC ":crt1.o%s}}} \ +- crti.o%s %{static:crtbeginT.o%s;: %{shared:crtbeginS.o%s} \ ++ %{" PIE_SPEC ":%{static:rcrt1.o%s;:Scrt1.o%s}} %{" NO_PIE_SPEC ":crt1.o%s}}} \ ++ crti.o%s %{shared:crtbeginS.o%s;: \ + %{" PIE_SPEC ":crtbeginS.o%s} \ +- %{" NO_PIE_SPEC ":crtbegin.o%s}} \ ++ %{" NO_PIE_SPEC ":%{static:crtbeginT.o%s;:crtbegin.o%s}}} \ + %{fvtable-verify=none:%s; \ + fvtable-verify=preinit:vtv_start_preinit.o%s; \ + fvtable-verify=std:vtv_start.o%s} \ +-- +2.13.1 + From patchwork Wed Jun 28 16:04:18 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106548 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3715797obb; Wed, 28 Jun 2017 09:05:51 -0700 (PDT) X-Received: by 10.99.166.17 with SMTP id t17mr11456272pge.60.1498665951192; Wed, 28 Jun 2017 09:05:51 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665951; cv=none; d=google.com; s=arc-20160816; b=mMZaKfdppVLfB/m83aAWecFYNfIgVlIBgDmiUd+uwwdAsKB/0Atzr43I73frb8MMvb c7vvlRKzcU0AtVnL5aRX7yaxcT2I4fXxMuCZruNaW3ICZp3Yel4meALkR+VRXAbgj/Q5 HxRUaQw/UDQ4Z+Q/fQmnDz9sT9BXQTw5cjMRFaGfj/9rJ6awhhEu4gI7g058Yc5n3uoB bNtBCiV2jkS7TL1pPuSfnOuIPabffobdwrvR4dFrfcuRd/Ga4iXTXdwdP3Qx76DiGN1q V1S5rMHME/rmnY5/PrkWAJtEn+LfQ24DHcCsTqQ50qappYRLQx6fcz2SKGNgi7Op/fg0 tscQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=3ioHGXMi4gxFVOwaLb6MVq0P6G4DbVHV+Uu9W4/Gj/g=; b=Gorw/zU9Hv7kxcOZLHm5UtpWGUV+m6muv4EYpeRKFhiQmmPu9PR3OWtgGWpg8ocLbX JO6ab4ZhAZayhcfy6bcjPOkkQbcAGxtp6xpKrKUxoS2toU35tb0szFj/f9JG/xRmtQM9 QaT1O5NGjoHX3mJ/7GFW3idVh+DGTQfsHaOfmpMY5MpRSW0+vMKI1swt9IAMel68Z2DY /3Bz65Sz+IY25acrTpV9AMGFwv1o08026ncKWYD+LuXuGwst06aQRssWB+2dkQra5E5q cgCxzcs5EDY2Q1U4bLbg/jyqjG08VjPloN4urnpZOpAJ8AJiKBj38gU5BdI19mKp4w5C jjLA== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=nVlLGiFv; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id p15si2058325pll.342.2017.06.28.09.05.50; Wed, 28 Jun 2017 09:05:51 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=nVlLGiFv; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 0A86578067; Wed, 28 Jun 2017 16:05:42 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f42.google.com (mail-pg0-f42.google.com [74.125.83.42]) by mail.openembedded.org (Postfix) with ESMTP id 4A2D37805C for ; Wed, 28 Jun 2017 16:04:42 +0000 (UTC) Received: by mail-pg0-f42.google.com with SMTP id t186so34134289pgb.1 for ; Wed, 28 Jun 2017 09:04:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=YwIyUTciGeIiaIBZQVWXjaYnnIOHcmPQ9Rej5qwjlco=; b=nVlLGiFvonKMN0KUVTNomia0LrkD4cbYiiciWImx+asrJhWY2DgeG9yXu3wZ4YoWm3 Q9dpofk24VKD7PXQHvKf579o2bicNBH8YbGWlcjlBYQF2NxLHGHyACO4l30xs70Od/pA XeCXulG79fw/MW/sEhR7aZbX2IpULVSg+7GhuXoEZWHyhR2PrFunlv8rOEivxgeqqTZ7 wxBE2kxJwx5BpPsUI2DE4Jyoa+9ZtT8IKPClizkSuIPM8se6x5X/r+MrdfzJo2cXFifZ emOCieehLRYX00XVa0XY80e1UJ6RdpOMi6nThqE2dThUNGRNFInQczfY2RUNIRrivyZe DPrg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=YwIyUTciGeIiaIBZQVWXjaYnnIOHcmPQ9Rej5qwjlco=; b=fXKMry6mhTnlev6OCxt/BZq5RjA2QDDuCuWkk/mfNZ9uGc+kJ93KD5810C3PSTsqGv qn5ccst1wzuyr0YW/eLRuGZmyjFQoML0Nbl9fePKIQenea0mOpN2d/cKQ38h2JOoiFgR uZ1u7Qx0QEs+HQwXkXr4KHokaXM/8FoqUR9ciEHiTHtDzGKDSpMT0cqeN9JrXVgU9DLt 53oeuUECcX/Cpj77GIi/uF3ou4D+i1gIZyDe92TtJCFHdP+TLmvNw4K7YqnFuRgcKByv zQmBTV2BkBFqPieZzSHsgXoOVv2JTw6Npdbwqt7E7V9VGaFSK6DPej2bWAKNb5PXmBdm R2Ew== X-Gm-Message-State: AKS2vOzYNl4ND+Un6OhqGpYSFPRUhyUObGPvmxSQifQ/atMiyjtG6D3l G1iDn3nsfC+k5Nqk X-Received: by 10.84.198.129 with SMTP id p1mr12571706pld.120.1498665883910; Wed, 28 Jun 2017 09:04:43 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.42 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:42 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:18 -0700 Message-Id: X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 05/10] gcc: Link libssp_nonshared.a only on musl targets X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org glibc already provides the content for libssp_nonshared in libc_nonshared.a therefore we dont need to make it universal. This also fixed build issues on glibc when linking statically and using -fstack-protector Fixed errors like /mnt/a/oe/build/tmp/work/i586-bec-linux/aufs-util/3.14+gitAUTOINC+bdfcc0dcfc-r0/recipe-sysroot/usr/lib/../lib/libc.a(stack_chk_fail.o): In function `__stack_chk_fail': /usr/src/debug/glibc/2.26-r0/git/debug/stack_chk_fail.c:27: multiple definition of `__stack_chk_fail_local' /mnt/a/oe/build/tmp/work/i586-bec-linux/aufs-util/3.14+gitAUTOINC+bdfcc0dcfc-r0/recipe-sysroot/usr/lib/../lib/libssp_nonshared.a(libssp_nonshared_la-ssp-local.o):/usr/src/debug/gcc-runtime/7.1.0-r0/gcc-7.1.0/build.i586-bec-linux.i586-bec-linux/i586-bec-linux/libssp/../../../../../../../../work-shared/gcc-7.1.0-r0/gcc-7.1.0/libssp/ssp-local.c:47: first defined here collect2: error: ld returned 1 exit st atus Signed-off-by: Khem Raj --- meta/recipes-devtools/gcc/gcc-7.1.inc | 2 +- ...shared-to-link-commandline-for-musl-targe.patch | 42 ++++++++++++++++++++++ .../gcc/gcc-7.1/0040-ssp_nonshared.patch | 28 --------------- 3 files changed, 43 insertions(+), 29 deletions(-) create mode 100644 meta/recipes-devtools/gcc/gcc-7.1/0040-Add-ssp_nonshared-to-link-commandline-for-musl-targe.patch delete mode 100644 meta/recipes-devtools/gcc/gcc-7.1/0040-ssp_nonshared.patch -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-devtools/gcc/gcc-7.1.inc b/meta/recipes-devtools/gcc/gcc-7.1.inc index b52d51fba6..96fc11c943 100644 --- a/meta/recipes-devtools/gcc/gcc-7.1.inc +++ b/meta/recipes-devtools/gcc/gcc-7.1.inc @@ -64,7 +64,7 @@ SRC_URI = "\ file://0037-Search-target-sysroot-gcc-version-specific-dirs-with.patch \ file://0038-Fix-various-_FOR_BUILD-and-related-variables.patch \ file://0039-nios2-Define-MUSL_DYNAMIC_LINKER.patch \ - file://0040-ssp_nonshared.patch \ + file://0040-Add-ssp_nonshared-to-link-commandline-for-musl-targe.patch \ file://0041-gcc-libcpp-support-ffile-prefix-map-old-new.patch \ file://0042-Reuse-fdebug-prefix-map-to-replace-ffile-prefix-map.patch \ file://0043-gcc-final.c-fdebug-prefix-map-support-to-remap-sourc.patch \ diff --git a/meta/recipes-devtools/gcc/gcc-7.1/0040-Add-ssp_nonshared-to-link-commandline-for-musl-targe.patch b/meta/recipes-devtools/gcc/gcc-7.1/0040-Add-ssp_nonshared-to-link-commandline-for-musl-targe.patch new file mode 100644 index 0000000000..310f7aacba --- /dev/null +++ b/meta/recipes-devtools/gcc/gcc-7.1/0040-Add-ssp_nonshared-to-link-commandline-for-musl-targe.patch @@ -0,0 +1,42 @@ +From 75a42d6d0f1f9784327f74882195a5c24843d5a8 Mon Sep 17 00:00:00 2001 +From: Khem Raj +Date: Tue, 27 Jun 2017 18:10:54 -0700 +Subject: [PATCH 40/49] Add ssp_nonshared to link commandline for musl targets + +when -fstack-protector options are enabled we need to +link with ssp_shared on musl since it does not provide +the __stack_chk_fail_local() so essentially it provides +libssp but not libssp_nonshared something like +TARGET_LIBC_PROVIDES_SSP_BUT_NOT_SSP_NONSHARED + where-as for glibc the needed symbols +are already present in libc_nonshared library therefore +we do not need any library helper on glibc based systems +but musl needs the libssp_noshared from gcc + +Upstream-Status: Pending + +Signed-off-by: Khem Raj +--- + gcc/config/linux.h | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/gcc/config/linux.h b/gcc/config/linux.h +index 2e683d0c430..5ff0a2cb2ff 100644 +--- a/gcc/config/linux.h ++++ b/gcc/config/linux.h +@@ -182,6 +182,12 @@ see the files COPYING3 and COPYING.RUNTIME respectively. If not, see + { GCC_INCLUDE_DIR, "GCC", 0, 1, 0, 0 }, \ + { 0, 0, 0, 0, 0, 0 } \ + } ++#ifdef TARGET_LIBC_PROVIDES_SSP ++#define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \ ++ "|fstack-protector-strong|fstack-protector-explicit" \ ++ ":-lssp_nonshared}" ++#endif ++ + #endif + + #if (DEFAULT_LIBC == LIBC_UCLIBC) && defined (SINGLE_LIBC) /* uClinux */ +-- +2.13.2 + diff --git a/meta/recipes-devtools/gcc/gcc-7.1/0040-ssp_nonshared.patch b/meta/recipes-devtools/gcc/gcc-7.1/0040-ssp_nonshared.patch deleted file mode 100644 index e9fb35cb91..0000000000 --- a/meta/recipes-devtools/gcc/gcc-7.1/0040-ssp_nonshared.patch +++ /dev/null @@ -1,28 +0,0 @@ -From 6c98538411ac30c2262b2635547974c6cd1699c5 Mon Sep 17 00:00:00 2001 -From: Szabolcs Nagy -Date: Sat, 7 Nov 2015 14:58:40 +0000 -Subject: [PATCH 40/47] ssp_nonshared - ---- -Upstream-Status: Inappropriate [OE-Specific] - - gcc/gcc.c | 3 ++- - 1 file changed, 2 insertions(+), 1 deletion(-) - -diff --git a/gcc/gcc.c b/gcc/gcc.c -index 84af5d5a2e1..2c6471aa565 100644 ---- a/gcc/gcc.c -+++ b/gcc/gcc.c -@@ -872,7 +872,8 @@ proper position among the other output files. */ - #ifndef LINK_SSP_SPEC - #ifdef TARGET_LIBC_PROVIDES_SSP - #define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \ -- "|fstack-protector-strong|fstack-protector-explicit:}" -+ "|fstack-protector-strong|fstack-protector-explicit" \ -+ ":-lssp_nonshared}" - #else - #define LINK_SSP_SPEC "%{fstack-protector|fstack-protector-all" \ - "|fstack-protector-strong|fstack-protector-explicit" \ --- -2.12.2 - From patchwork Wed Jun 28 16:04:19 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106549 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3715937obb; Wed, 28 Jun 2017 09:05:57 -0700 (PDT) X-Received: by 10.98.35.214 with SMTP id q83mr11715165pfj.101.1498665957206; Wed, 28 Jun 2017 09:05:57 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665957; cv=none; d=google.com; s=arc-20160816; b=ITeJsE8frmk+Hhq0zrwu5OKtcAQxLj/7e0Q2ErGsMG9fh7UzrTgt7JaBf7FdUVK3aT h4QNckLFkCtlOeojsZhO/W0P6bKVJnkwfijuu/ixWu91JJWTtJLk1nWcqRwAzcsV+DAz /mDWx6U0tPpUTJ+obYGSlzsAOgW1ctCwS9tcDO8jebS6RjMeyUDrHT1IT8fpp9LOQtoP h6W/GeHchVqAOCL84AZyHzdjVyR8JU0i7cDMS8LibY4DrwmfQ5fftiJ5gpOWRLyQDgqY g2v01BP6E7RGhqeLfBELBBL7Gs2itMtrOoGvK3e0X0lRiVPOLfstdiDBXKGbTRyfK1mI EYcQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=HwXeYyl5n4+Jiz17dXSnLhuT0eDlqiBz5yREq0ItIs4=; b=sNRfq8HryoXEYjUSh8OWxSWOjj/Ln/MjMLdvit4oZLW3kqEtEx8IlR1SOl354S+I2S GztIfW9juilqc1ykxZSu+J7fgt5iiq6SKSqwJQYzA8NbllvoI1DYa/dq4Xv8NpX83a0S gqQrcSxi8hhEps0+yjsAMk9YWiPP2CWwOi/sYMidIOlsOtpIFX+If7CQeN+ECB2ZLnVW li8mpgoklFFMimFSHLEbi7zIwOgr6vi/ynhfGJoOqluxP8p/j+UbkMfDUt7J0JBq8mPM bCkIVQeKtFBkyWz8JHqJGkLPho36Tz8Cor7ZVQMQDBY1VWbLxasonbQdlHPl72bTYugp vxNw== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=XeEZJtpJ; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id 7si1850973pgt.528.2017.06.28.09.05.56; Wed, 28 Jun 2017 09:05:57 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=XeEZJtpJ; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 10AAC780BE; Wed, 28 Jun 2017 16:05:43 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f41.google.com (mail-pg0-f41.google.com [74.125.83.41]) by mail.openembedded.org (Postfix) with ESMTP id 844DC7805C for ; Wed, 28 Jun 2017 16:04:44 +0000 (UTC) Received: by mail-pg0-f41.google.com with SMTP id j186so33917527pge.2 for ; Wed, 28 Jun 2017 09:04:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=tG4bJD4h2vkzUkRHQptbCqLK/n+3DxBBzMBIflJOOP0=; b=XeEZJtpJupP2nNizceAL1E2vaIzyuXj5el2+TB4Y0KTIUxPkls0c9H8icusclqRDs0 mKD0/9MSHmSbXB25oJ3vj87xw1gc8ZQUxdNPIRMxQrgS6FONkyi8qfeFilTVOEXfTrgT tzZyHqFWDjxBQmADhLazg8GxsSnXtfoQde8htG31rhMB3PqI7kcyok5tz9ug3skxby1+ 0uExc3/pmjFkpZ2YmYiLSo1vNkwgR3R5EPsTI9m5H4mtC/BuZzR8q/tBlJ5kdPK/lwgN +fYCuhMK6npfGnNx+IkWikd7Ua4fJN9koZcpRqz7aWjagtTR8N6E3GkYNS9SQYa1KXQZ MZww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=tG4bJD4h2vkzUkRHQptbCqLK/n+3DxBBzMBIflJOOP0=; b=LZwoARtvZNvAI+4TrN/zAJ3C3kXOP+30XjEEsu62/weJx9zfQG/jaJFXJPdEyvKG9f 5l+25w9cJlqP5JrAL16JtlHZYnBaBLmUnUujIctv8QMsUHUpmxC7Zn1pM3D3l2Q1fq8m bA7XQLfN+j8eXfdkBsXPccaABaz/dxYOolodhS/sq74JJ0ioTjHqEufcJTxQvHUZyd9W OB8EdIQYGLMuGj1xUaNKJjTFgfKDZBkr7Gujjuvf3bRy97JS7OA30SoVLMRQmZB9QBnj Bk88X8oTL2HUjSyyAq8B2O0QxCz9Hgg/j6SjqdjfRtT0wx/vxVihl9JFXUgwrlwYC+oj CfEA== X-Gm-Message-State: AKS2vOz43Pbk3nYRxoQbF0NYkynZ6hera5dHCKBINAOy0cnY6iQtcOl9 MfED+fY4PMoJYRTA X-Received: by 10.99.174.4 with SMTP id q4mr11021840pgf.196.1498665885887; Wed, 28 Jun 2017 09:04:45 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:44 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:19 -0700 Message-Id: X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 06/10] libunwind: We set -fPIE in security flags now if gcc is not configured for default PIE X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Signed-off-by: Khem Raj --- meta/recipes-support/libunwind/libunwind_1.2.bb | 4 ---- 1 file changed, 4 deletions(-) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-support/libunwind/libunwind_1.2.bb b/meta/recipes-support/libunwind/libunwind_1.2.bb index e598e40c6f..c6312f24fd 100644 --- a/meta/recipes-support/libunwind/libunwind_1.2.bb +++ b/meta/recipes-support/libunwind/libunwind_1.2.bb @@ -21,8 +21,4 @@ EXTRA_OECONF_append_libc-musl = " --disable-documentation --disable-tests " ARM_INSTRUCTION_SET_armv4 = "arm" ARM_INSTRUCTION_SET_armv5 = "arm" -# see https://sourceware.org/bugzilla/show_bug.cgi?id=19987 -SECURITY_CFLAGS_remove_aarch64 = "-fpie" -SECURITY_CFLAGS_append_aarch64 = " -fPIE" - LDFLAGS += "-Wl,-z,relro,-z,now ${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-gold', ' -fuse-ld=bfd ', '', d)}" From patchwork Wed Jun 28 16:04:20 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106550 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3716056obb; Wed, 28 Jun 2017 09:06:02 -0700 (PDT) X-Received: by 10.101.73.72 with SMTP id q8mr10995753pgs.219.1498665962840; Wed, 28 Jun 2017 09:06:02 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665962; cv=none; d=google.com; s=arc-20160816; b=ZnpSJYxcFXUAqSHhP3IvMVODvXSY4PAatH9ohoe/21iHQHa01XrfEejKTqi8WBu3qC ylifSkAYjYk019Bz22U34eGzn8O9tODMx5AP9dUadEf8PrB5qQ8CvtXW+mueBZL++ylL SxBrWW0tDBKxL8uQSYwoZtYCoVgI9scvv3a1FFFh2GItopBQ7EHgXou0kKFII1QZ8aRB 7xzPdLzPisReNY78IB9ctwgrb6/aHyfwr9JIFmyiTtrktjWyC7RV19dWEj7P9wf8LEXm 61V5eVPUoW3Odf/W2tI6MCAyUQkN0zXGwIA30eYPnaEeOYSJa+uXp8/me2Q8hRkgPZ10 +lXw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=MWY+siDJIa9zElG8n2H2JMlE8iYOz3HQl+hfilHudNE=; b=ZUW81sy0dOf6kEPY2I0B5Nb6K9XrqHW+G38Dfr2EFx0op/iCMFK6yWYZxKUP0UylXT lwcI2+RXKU4CrpuNqAv+kKhquochzHVFPdGznPOQ0tIL72f4EokZp6yw9O4z/f0jiivP pFjhcPtWOLI7WS25rY4f/h2w6R2NCbEVNVtAMRMON2rvyXvGPvDzOIq0xxho7/3sMxPS WwZS22dGkJU1BudEmsDacDWohG+GhIBR5+0X/Pnl9szO2+6M4/18TcuojS3w+mY4IgQM JZSmiMMiACgdn4NjmOpO5w8w922zducsONjKwqyHu40ijw6VDd3oqotQJNkvEmEkt2eD Ou9Q== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=eDcUsxXY; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id x88si1789063pff.121.2017.06.28.09.06.02; Wed, 28 Jun 2017 09:06:02 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=eDcUsxXY; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 136B6780CD; Wed, 28 Jun 2017 16:05:44 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f68.google.com (mail-pg0-f68.google.com [74.125.83.68]) by mail.openembedded.org (Postfix) with ESMTP id 09B737806E for ; Wed, 28 Jun 2017 16:04:46 +0000 (UTC) Received: by mail-pg0-f68.google.com with SMTP id u36so8711470pgn.3 for ; Wed, 28 Jun 2017 09:04:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=j8j2vwmPrTcQyuEyDj6yKz3FUPqEvDTaa3vIjhP++QQ=; b=eDcUsxXYWw8YycnptpTOoNbMLVwi9pkLhmXEFl5uzReF2Vuqa5BTlZnvDm0I4CxJY2 kxIuP6+CkTfPmjzK7TS6D+JQdkBOZrGRQa2OfkYAwp6WARcMNU2AGAm5HSHZdYyEPf1V ADglZOimXEI3WrfU8V3AsJ+y2G8JdteCyigcXOPdUs6csxJd4C9TW1P0rnYmXXvm5vBW EV4UTvWgXbLGuUzEP53C55dbRgOK47oKcK3b0HgesFm69+cDWmf6ZhTGKPRLyBC+GvEw Hh5wrUENJUXxAW4iZ0pi/41SLRQZKjXuns4qlYJGeadU5SZdf150tVQpZVmlEofVXXsA wPfg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=j8j2vwmPrTcQyuEyDj6yKz3FUPqEvDTaa3vIjhP++QQ=; b=Jq0yq3Rj7gKFQvdxc8h0nHTuTmpQUwKtoBS9EAvKoBTgSVjjSUBEi/CuKC4b9tjVrm Xy26+YAyvudKilrkOh4VljmC7YujLfA/dhave/weTXah9LD9Vg4eopEQMqLrmC/G0zTe d/y10HtC5nUXuxubGd53l6Fy4RpvBrkVsDVLjQvIJb99PRNLv96Ob7BKyxP53sJZ2llp pP3gp/ZLmxzGelWTUA2QuSMTTTL4wCccwX9nMyBCEvdNqlaU+JyOPvaP2MLpBHSHK2Wc Hg4eOe22/8Ntt78Zcv0il8Oc7mZZ2nLXMV9oii7omJ6jc1w1YZNhqWnsw654GuKRnvHc 9LpQ== X-Gm-Message-State: AKS2vOw+mRDNoilrHsc4wEm0q1WXfEypJdloBamgoOu0htyR94Pw3T8h ejdqsVJvMQj4NR1W X-Received: by 10.99.120.69 with SMTP id t66mr11240137pgc.237.1498665887585; Wed, 28 Jun 2017 09:04:47 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:46 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:20 -0700 Message-Id: <24240b4da9f37a030a301b209d3a09d0e505c6f2.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 07/10] valgrind: Remove -no-pie from cflags X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org It has been moved to distro security include file Signed-off-by: Khem Raj --- meta/recipes-devtools/valgrind/valgrind_3.12.0.bb | 2 -- 1 file changed, 2 deletions(-) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-devtools/valgrind/valgrind_3.12.0.bb b/meta/recipes-devtools/valgrind/valgrind_3.12.0.bb index a81adc31d6..888b132ec7 100644 --- a/meta/recipes-devtools/valgrind/valgrind_3.12.0.bb +++ b/meta/recipes-devtools/valgrind/valgrind_3.12.0.bb @@ -73,8 +73,6 @@ CACHED_CONFIGUREVARS += "ac_cv_path_PERL='/usr/bin/env perl'" # which fixes build path issue in DWARF. SELECTED_OPTIMIZATION = "${DEBUG_FLAGS}" -CFLAGS += "-no-pie" - def get_mcpu(d): for arg in (d.getVar('TUNE_CCARGS') or '').split(): if arg.startswith('-mcpu='): From patchwork Wed Jun 28 16:04:21 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106551 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3716162obb; Wed, 28 Jun 2017 09:06:08 -0700 (PDT) X-Received: by 10.98.160.28 with SMTP id r28mr11622942pfe.86.1498665968564; Wed, 28 Jun 2017 09:06:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665968; cv=none; d=google.com; s=arc-20160816; b=lyadvHiJ0FU/pWmQq/m1Hbqz+NVK88hthfEzhKXJizWKYNXTTKJqXu/Y0AWX9yMCq1 pktaazpg9bM3SIWoVHzKmadRdj0j1PikyrY6Fh1ctB06uPl/VhMR/aK7MFrKzSG5NxIy acPh6ZK68B5EUuBp8iM+mMqxrUcmg1JFbxqzWlTDk9G3q1eNTpwmtca3DZuCAXNbEgkV 8FxUgUz0j66MxfTMS9U7kyHwg4DMBwRy/0wcR9BeHlmK0Ez4yIBfQ6ZLUbsUEKjffNQo D6MLr3zGl42ZzpG2ZKhdNV1iigU1nS6gXhZSg3ytCzPt+l4zP8xrA2yDDQi+I2e/E3Da wVhw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=peDhKn39rSabQxwEan3g85qk2D2due05L5sRUoAjQ1M=; b=qnFH3+NYb0FHaBIq5+qVubrfEEd31SbSzlYr6oyHKthzlRPCYRVYjbFrL93hJ0QpEa X+vMhIQnh0amfXs8wnBpMCN43dG/0J/r3diuxRygQhdbyui8VxVl0Lv7U+JoW1L9WHps KUHe2jAmE4dYoc/MS4phi9mIjTR602/lEb2oraUPn1qGZZryMQpQCdRwDP3P1DwaCv/8 Rj8kS8TOBKJTxNzGdG2EAe2JD6NB5resflrrpAVM0qTC0BJm4/ogkKOYHRs2vvvLdILf Tv4Whi4Svc/uVGBZCQfJCCgpS9OIcFTsB2e80SEQIWF210EYRC8yTQt0xjCofq/hm/gz cvOg== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=SdUTtxcz; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id m26si1692947pgc.202.2017.06.28.09.06.08; Wed, 28 Jun 2017 09:06:08 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=SdUTtxcz; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 14F2D780ED; Wed, 28 Jun 2017 16:05:45 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pf0-f196.google.com (mail-pf0-f196.google.com [209.85.192.196]) by mail.openembedded.org (Postfix) with ESMTP id 6FB317805C for ; Wed, 28 Jun 2017 16:04:48 +0000 (UTC) Received: by mail-pf0-f196.google.com with SMTP id e199so9590998pfh.0 for ; Wed, 28 Jun 2017 09:04:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=qqEGhtyXi39gmPhJk3WIcZfF/wdykjKTl3fDxcWtwKM=; b=SdUTtxczZWb8GmfhyrlCkK9exLhgpoAe+QHF+2pyCq9AtSsWkE+KkWTgM4H0gkerpI B5Hwnfh4JWPQPsVRqzwgZqiMhhk7hkexqbQfw5WZp13Zq5rx/PUiviosq5vCsM4xVKli u2Pua/UcS9iANewmAjIBi3mMcJgSPxjV0eTbNQsl1xR07Exro3IcJ6kvgx4rLaTtirXI sHedn4BdqEzABfOiyWRrr7lMhMurNDynUOuzqbpNkWINJLTSsOuZ+hr7913IRw6ehBDO LViZ0dt8SamBTFz+q8wbqM3f3AEN91wzrrDxJj1eddINTscIyq5oo7UYPzUF57UNEW0L VSMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=qqEGhtyXi39gmPhJk3WIcZfF/wdykjKTl3fDxcWtwKM=; b=oxHdtHMNAPBKjdeGq/A6m/VSq1MF6DQerQrvhb66w+cHkQtM+d6YnPRmyPmfU99zwd tnq9RiOJI19j8+eeERL9bO+hv6/vajAr91CtHpW/5apVrY2EFQJHL9QY23vTN9WTcVTn mYN+aEOtSIkGonqY7/Mg2zXEIdweDV9BZhSHZImT5ZsTXtoXutt4ZB5XgJl3Yn0UY7UX fEymYURVAQK1n0+rfENhDYfJPpD95/1VGvtnJGpDB81Fp3PLWmFjWnejHgTcVv69HfLq aKKFilsN2SVt7zGVbN+LtwrNvqP9VoSW2I+TsrJpOekitS/3LQaRFgEBuUuu6JzAs6mi V2RA== X-Gm-Message-State: AKS2vOwIgPrmngJJFHUPS0H/HhgW8j45NZSUvYYy1vo1qafAKcEikCCn lqRZ2l8jS8l28hms X-Received: by 10.84.178.4 with SMTP id y4mr12718940plb.158.1498665889398; Wed, 28 Jun 2017 09:04:49 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:48 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:21 -0700 Message-Id: <481664a364a330875a79bf80876b4d30ff8aaaff.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 08/10] iptables: Apply 0001-fix-build-with-musl.patch unconditionally X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org This patch is generic enough, That it can be applied universally and makes maintainence easier Signed-off-by: Khem Raj --- meta/recipes-extended/iptables/iptables_1.6.1.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-extended/iptables/iptables_1.6.1.bb b/meta/recipes-extended/iptables/iptables_1.6.1.bb index 4019e2a4a4..b37c55a64e 100644 --- a/meta/recipes-extended/iptables/iptables_1.6.1.bb +++ b/meta/recipes-extended/iptables/iptables_1.6.1.bb @@ -22,8 +22,8 @@ SRC_URI = "http://netfilter.org/projects/iptables/files/iptables-${PV}.tar.bz2 \ file://types.h-add-defines-that-are-required-for-if_packet.patch \ file://0001-configure-Add-option-to-enable-disable-libnfnetlink.patch \ file://0002-configure.ac-only-check-conntrack-when-libnfnetlink-enabled.patch \ - " -SRC_URI_append_libc-musl = " file://0001-fix-build-with-musl.patch" + file://0001-fix-build-with-musl.patch \ +" SRC_URI[md5sum] = "ab38a33806b6182c6f53d6afb4619add" SRC_URI[sha256sum] = "0fc2d7bd5d7be11311726466789d4c65fb4c8e096c9182b56ce97440864f0cf5" From patchwork Wed Jun 28 16:04:22 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106552 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3716281obb; Wed, 28 Jun 2017 09:06:14 -0700 (PDT) X-Received: by 10.84.198.36 with SMTP id o33mr9987029pld.79.1498665973988; Wed, 28 Jun 2017 09:06:13 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665973; cv=none; d=google.com; s=arc-20160816; b=t+SxoM2daYhFRPmWbaM9v5UXhbpwquo7WqPN/7ky8G8fiqRgUztgJHQ1WQ6zcYfqJo WNS8zGMSEHrlY8Q/x+O8Z1oX6mS5J8WOMU0XnXkeQc/0OXtz/PZISihiKSyZY6tS3CZO XtgF8eSYg5Ic9aRaW4QbrFOq2vWfyTFo6WQYMHLCjqVSFnOpLVbHSLSID1Hnho9uXsTl dcUfBToGF7vZJinQ1t7KBYH/OpLNy1rS+yiwcbAiHl6Y70q7wOKJKAvitKATXDpfnygc 7atSf3TbVYwBBVTN60vtjARUNaSUBrAB0g5eJaGtRDofU3v46nsK+Xsw02Q7WmQlEX7l Wcfw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=wWYgj2pYhL8tArYosHMOjcwG5S5HsJtVZj6UiyeeaUo=; b=fXl0YwphQ/PZMUgmeyHuLDcYhCho5XbWFSzs0mJNqvB+KY11FtvD6M4U65p95shrMa Oy2OpVFJT8XFyU9AOfEAJVykQLUqdyG151ENfjUgYyGSQIy+XQH6TIY5KfV7/gwEir4R i0S7N0pWwDxevy9CvMgnEMBK8wxYZbVQVAI9X6yAekFRbZ8Z2iAL1VMIAMZLuXUYHBGS LWUXXe/yOZEnA+bxp55TFiIkdziMOvcMyPMIeBarZM2l7VApAmttzk+C2452ESfbob1t +MXPUQpfOeQuOB3VwfhEmcsJi/TGPqc3s0D2HLwiM5APNXs0TpNfCDUE1oHhSVkY0rQp 56FA== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=jrJnASyz; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id x189si1783524pfb.388.2017.06.28.09.06.13; Wed, 28 Jun 2017 09:06:13 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=jrJnASyz; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 19507780FA; Wed, 28 Jun 2017 16:05:46 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f45.google.com (mail-pg0-f45.google.com [74.125.83.45]) by mail.openembedded.org (Postfix) with ESMTP id 8F06378072 for ; Wed, 28 Jun 2017 16:04:50 +0000 (UTC) Received: by mail-pg0-f45.google.com with SMTP id u62so33929971pgb.3 for ; Wed, 28 Jun 2017 09:04:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=ESW0DW78X4R2ggMhaQLbPZXDgL0HBc4voKsGJuXCFus=; b=jrJnASyzMr+/H/or3dHfFWSSQXSrAg26nq1NqMP0sMWPfPv7UsqiYgqnKi0KJCcBE7 HfbysBCr6ro/u474Fb7m2AlbKwf5KbHtcZXK6d4nAT/P3/4TSR3ulKtwS+GCUt8QqyE7 Op8gMolhsoGv1O4qlyL1iMU5zdmqg7fGqXpHci6h9LwZBRfE6Sxg05elry1+NdNUZ8n+ zOqfNu/9xWEiRUzZrczEh6BskcVnnt+VlyiDgVppqyiMoljLdcML1/K8VBDpuZAW1JkA vSMd7pVh0OVVNUOy2Kxdd7dBAjwbferEYObql1AvFQJ1z5jrk4psfcpAfggdzeTpmViN Yv3Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=ESW0DW78X4R2ggMhaQLbPZXDgL0HBc4voKsGJuXCFus=; b=PxASupkyZg6/wnv8KN6U1KqZDhkTEBQ0wbdrWkSkuCBBbZIe32U6lN2JIcYdeZBhKU +KO6Y+8DnJlJpDsZfTRTrRNN+TukPmdkYF7nTYpZ4ifUwBK3UvGTuYwYkfmRaMhtUGCa +Mrc64j9AHzRRfzWS6q+k8f/JNbufp5dcjBagqAjMY7XEMQFK8WHntohqdZlIM+e8HWy fmKiDpKHFBI4tM6fTjrTJ22BR620gpoweEnjcDebc6ASMFH6Qq8vkVuURjG2bBmyxo+C L1aV75kXrucADB922Rnot/i2Dopy5UxkfKs1Nd+0Bl6ocJBl5g0pYmvKF60M2hhukd2u E7+w== X-Gm-Message-State: AKS2vOxq9AecH4YwVcFM/dOK827hc8IJ7mcZ+0TNAsX8nyjFkVTFrHtk gssd0fDclgS9qdtF X-Received: by 10.98.1.72 with SMTP id 69mr11480156pfb.124.1498665891282; Wed, 28 Jun 2017 09:04:51 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:50 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:22 -0700 Message-Id: <9604c347c99ea49d1d533296265c3d2b39f9980d.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 09/10] icu: Fix build with glibc 2.26 X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org Signed-off-by: Khem Raj --- .../icu/icu/0001-i18n-Drop-include-xlocale.h.patch | 31 ++++++++++++++++++++++ meta/recipes-support/icu/icu_58.2.bb | 3 ++- 2 files changed, 33 insertions(+), 1 deletion(-) create mode 100644 meta/recipes-support/icu/icu/0001-i18n-Drop-include-xlocale.h.patch -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-support/icu/icu/0001-i18n-Drop-include-xlocale.h.patch b/meta/recipes-support/icu/icu/0001-i18n-Drop-include-xlocale.h.patch new file mode 100644 index 0000000000..add0d765b7 --- /dev/null +++ b/meta/recipes-support/icu/icu/0001-i18n-Drop-include-xlocale.h.patch @@ -0,0 +1,31 @@ +From c4254fd8ff1888ca285e3242b812010357ce2b3e Mon Sep 17 00:00:00 2001 +From: Khem Raj +Date: Sat, 24 Jun 2017 22:52:40 -0700 +Subject: [PATCH] i18n: Drop include + +glibc 2.26 drops this header + +Signed-off-by: Khem Raj +--- +Upstream-Status: Pending + + i18n/digitlst.cpp | 6 +----- + 1 file changed, 1 insertion(+), 5 deletions(-) + +Index: source/i18n/digitlst.cpp +=================================================================== +--- source.orig/i18n/digitlst.cpp ++++ source/i18n/digitlst.cpp +@@ -61,11 +61,7 @@ + #endif + + #if U_USE_STRTOD_L +-# if U_PLATFORM_USES_ONLY_WIN32_API || U_PLATFORM == U_PF_CYGWIN +-# include +-# else +-# include +-# endif ++# include + #endif + + // *************************************************************************** diff --git a/meta/recipes-support/icu/icu_58.2.bb b/meta/recipes-support/icu/icu_58.2.bb index 4d062ebf94..47684a6c8b 100644 --- a/meta/recipes-support/icu/icu_58.2.bb +++ b/meta/recipes-support/icu/icu_58.2.bb @@ -16,7 +16,8 @@ BASE_SRC_URI = "http://download.icu-project.org/files/icu4c/${PV}/icu4c-${ICU_PV SRC_URI = "${BASE_SRC_URI} \ file://icu-pkgdata-large-cmd.patch \ file://fix-install-manx.patch \ - " + file://0001-i18n-Drop-include-xlocale.h.patch \ + " SRC_URI_append_class-target = "\ file://0001-Disable-LDFLAGSICUDT-for-Linux.patch \ From patchwork Wed Jun 28 16:04:23 2017 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Khem Raj X-Patchwork-Id: 106553 Delivered-To: patch@linaro.org Received: by 10.182.135.102 with SMTP id pr6csp3716392obb; Wed, 28 Jun 2017 09:06:19 -0700 (PDT) X-Received: by 10.84.132.2 with SMTP id 2mr12885410ple.190.1498665979717; Wed, 28 Jun 2017 09:06:19 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1498665979; cv=none; d=google.com; s=arc-20160816; b=b66uFSknYFBSB4FUjiXKqMAXBpQZudQOaIPGoBe41BR9RZg483gaTad9xCp7OQVybe wOwper5b3kpa3XMIYKOCrOZ8jGjvKDcZ0WSFoPY1OWy+Ge6CriHN5fioC+KGWVZ6i+En tP8iB+cm7uSBZmzGL4UxhnCTUjXpG+rzdiYe+15Eml7ff3fw1F7NgfuOtSmrU/odfsDb sigXusqWZjJ5mvm64ukdZF7XBS8Yvu4/O2NIIR36JDkajuj3LIAFMhIPMqhQzDrvkq8k nfGHPAVJ3En1jZEuyhjzBaGwwTWkDq8w84+0xj6btSyhjcSvNwhh2qxqNjs7L1scA8k3 qm3A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:sender:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:references:in-reply-to:message-id:date :to:from:dkim-signature:delivered-to:arc-authentication-results; bh=kl9ufDlKCTv9RkXJBv5wWFURYyHDcQcuBFQTOH9dFOc=; b=wb+zH1hwpgjCvvOzQTlyOF/DKl0NiVTjUJl34EZ1r10AKjqToy8QGW9Oi4XQS8pucA acp1D2G9klmG4jaoDaL1PDS0gP2RkmIkDFgAVVAjuYp4H8VHXtqu2lTpQeqC92Q3lE57 9e6kaWzy7jT5uYFm41l8GcazaZyWAGz/+sNTP//BtXPN2r+Jcuyo5IJCCk/bu1SAuh+M fSGkzaLx51+JoIUMQA5nTnzgJN5b3PpLNBXKwK9gMhHTsWxwpTpRyyFLkf7flG5CofOX Wv5mUt5ut0bQMSRknqbeqW/7236aEQh0FELpCY3PuR2Yw13aRrb46n+Th/LrsBpiYDjZ wJHQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=FCvox5sH; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Return-Path: Received: from mail.openembedded.org (mail.openembedded.org. [140.211.169.62]) by mx.google.com with ESMTP id o3si1775031pfo.465.2017.06.28.09.06.19; Wed, 28 Jun 2017 09:06:19 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) client-ip=140.211.169.62; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@gmail.com header.b=FCvox5sH; spf=pass (google.com: best guess record for domain of openembedded-core-bounces@lists.openembedded.org designates 140.211.169.62 as permitted sender) smtp.mailfrom=openembedded-core-bounces@lists.openembedded.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=gmail.com Received: from review.yoctoproject.org (localhost [127.0.0.1]) by mail.openembedded.org (Postfix) with ESMTP id 1BA1A78170; Wed, 28 Jun 2017 16:05:47 +0000 (UTC) X-Original-To: openembedded-core@lists.openembedded.org Delivered-To: openembedded-core@lists.openembedded.org Received: from mail-pg0-f44.google.com (mail-pg0-f44.google.com [74.125.83.44]) by mail.openembedded.org (Postfix) with ESMTP id 20CC171A62 for ; Wed, 28 Jun 2017 16:04:51 +0000 (UTC) Received: by mail-pg0-f44.google.com with SMTP id t186so34136164pgb.1 for ; Wed, 28 Jun 2017 09:04:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=o+XhulgOUVxOZqt9rItNfnAjDBNxfjlILm0pavkJo3s=; b=FCvox5sH2lY/cRmUuGRIMZVa86LhnNBbY0lt6KiCnN1A2XNLFiV3+EALpheWCglx5e p3BMtFNJa0aGOKelPvBvUVwoxlzNJpAhLjXMCl6ZkGFqI3WOYHwn7VbHZslDvfNqSiy+ omoShF1isJbIB71mJF80dZH9D+99y1ZqRktNAz1Q2GQC+C4zw74Xgr5f0QJlqAYoOlKw rjHhKzTWpMKyZIhe6er/u38xh9usWULBubQhrGNejYa/MD3/lb4wE5gfXPtwwe+6N1/j zYw4SIKut7plhyJXVmyJXonoqXsbfyOcRiksgjFZhRQeovcHWKyq1PS23ydfLDuvff6v V+DQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=o+XhulgOUVxOZqt9rItNfnAjDBNxfjlILm0pavkJo3s=; b=Y1CuGgZQbeFAlROeLlyHYVvpFfyCaqx+aRyDE6qHSenAo1XNrvarBg9igyOhkZSeg5 Lcsrftdm0JXZQDKH8lOJzvAsjzvHcTLeZjhr7saGMsjytTw2vhGlLpRcA3mUNB9o19Vz hSqgemMiSNazGADf94H9Z8Masdd6yuFW/OrH67dZ16jis4ff/pDIrp+Lyuv80Q+T764i OLxbch7FUmASeE97RP4PUANutQwKQTOidT0CC7jI0UHOTrL9D7RG9KFKP1NyF+WGul0U Mmvqz6Q/DIjjnWjziGsVfXdh5oObDb6hx212BCrdqKF9GvhYxIciGGEPAL64H8cBoWnS Ag9w== X-Gm-Message-State: AKS2vOwQVM6lu1V2idqJ9oIArto6xQajFywWCljFqNv92B+wOT6R/mYF XvWNdHBkg4wa09el X-Received: by 10.99.18.65 with SMTP id 1mr11313499pgs.132.1498665892722; Wed, 28 Jun 2017 09:04:52 -0700 (PDT) Received: from localhost.localdomain ([2601:646:8882:b8c::3df3]) by smtp.gmail.com with ESMTPSA id v62sm5243608pfb.124.2017.06.28.09.04.51 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 28 Jun 2017 09:04:51 -0700 (PDT) From: Khem Raj To: openembedded-core@lists.openembedded.org Date: Wed, 28 Jun 2017 09:04:23 -0700 Message-Id: <4df4ce341657694b6afb95eb72c832618c49db87.1498665211.git.raj.khem@gmail.com> X-Mailer: git-send-email 2.13.2 In-Reply-To: References: Subject: [OE-core] [PATCH 10/10] gstreamer1.0-plugins-bad: Fix missing library with bcm egl X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: openembedded-core-bounces@lists.openembedded.org Errors-To: openembedded-core-bounces@lists.openembedded.org userland graphics driver provided libegl for rpi depends upon symbols from vchostif library, therefore add it to linker cmdline helps with loadng gst-gl plugins on rpi Signed-off-by: Khem Raj --- .../link-with-libvchostif.patch | 35 ++++++++++++++++++++++ .../gstreamer/gstreamer1.0-plugins-bad_1.10.4.bb | 1 + 2 files changed, 36 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad/link-with-libvchostif.patch -- 2.13.2 -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad/link-with-libvchostif.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad/link-with-libvchostif.patch new file mode 100644 index 0000000000..c382b17586 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad/link-with-libvchostif.patch @@ -0,0 +1,35 @@ +Add -lvchostif to link when using -lEGL on rpi + +This is required because libEGL from userland uses sybols +from this library. + +lib/libEGL.so.1.0.0 121: 00000000 0 FUNC GLOBAL DEFAULT UND vc_dispmanx_element_add + 1552: 00000000 0 FUNC GLOBAL DEFAULT UND vc_dispmanx_element_add + +These symbols are provided by libvchostif as seen below + +lib/libvchostif.so + 252: 0000b161 192 FUNC GLOBAL DEFAULT 9 vc_dispmanx_element_add + 809: 0000b161 192 FUNC GLOBAL DEFAULT 9 vc_dispmanx_element_add + +With this explicit link, plugins fail during runtime + +(gst-plugin-scanner:571): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-1.0/libgstomx.so': Error relocating /usr/lib/libgstgl-1.0.so.0: vc_dispmanx_element_add: symbol not found +(gst-plugin-scanner:571): GStreamer-WARNING **: Failed to load plugin '/usr/lib/gstreamer-1.0/libgstopengl.so': Error relocating /usr/lib/libgstgl-1.0.so.0: vc_dispmanx_element_add: symbol not found + +Signed-off-by: Khem Raj + +Upstream-Status: Pending +Index: gst-plugins-bad-1.10.4/configure.ac +=================================================================== +--- gst-plugins-bad-1.10.4.orig/configure.ac ++++ gst-plugins-bad-1.10.4/configure.ac +@@ -785,7 +785,7 @@ case $host in + HAVE_EGL=yes + HAVE_GLES2=yes + HAVE_EGL_RPI=yes +- EGL_LIBS="-lbcm_host -lvcos -lvchiq_arm" ++ EGL_LIBS="-lbcm_host -lvchostif -lvcos -lvchiq_arm" + EGL_CFLAGS="" + AC_DEFINE(USE_EGL_RPI, [1], [Use RPi platform]) + ]) diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad_1.10.4.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad_1.10.4.bb index 0bb4053e43..def03a9b81 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad_1.10.4.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-bad_1.10.4.bb @@ -18,6 +18,7 @@ SRC_URI = " \ file://0001-smoothstreaming-implement-adaptivedemux-s-get_live_s.patch \ file://0001-smoothstreaming-use-the-duration-from-the-list-of-fr.patch \ file://0001-mssdemux-improved-live-playback-support.patch \ + file://link-with-libvchostif.patch \ " SRC_URI[md5sum] = "2757103e57a096a1a05b3ab85b8381af" SRC_URI[sha256sum] = "23ddae506b3a223b94869a0d3eea3e9a12e847f94d2d0e0b97102ce13ecd6966"