Menu

#282 no full RELRO in piper-vamp-simple-server, sonic-visualiser and vamp-plugin-load-checker

Mercurial tip
open
None
5
2020-04-24
2020-04-24
David Runge
No

When building 4.0.1 for Arch Linux I ran our check tool namcap on it. All executables lack full RELRO:

sonic-visualiser W: ELF file ('usr/bin/piper-vamp-simple-server') lacks FULL RELRO, check LDFLAGS.
sonic-visualiser W: ELF file ('usr/bin/sonic-visualiser') lacks FULL RELRO, check LDFLAGS.
sonic-visualiser W: ELF file ('usr/bin/vamp-plugin-load-checker') lacks FULL RELRO, check LDFLAGS.

I was not yet able to figure out where exactly the build system(s) ignore the global LDFLAGS that we export in our package building system ("-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now").

Discussion

  • David Runge

    David Runge - 2020-04-24

    This basically means: exported $LDFLAGS are completely ignored by the build system.
    I've by now tried setting LDFLAGS_RELEASE in configure.ac to my global LDFLAGS, specifically exporting LDFLAGS when calling configure and make and setting QMAKE_LFLAGS to my global LDFLAGS.

    None of that works though

     
  • Chris Cannam

    Chris Cannam - 2020-04-24

    Bug in configure I think. Try this

     
  • David Runge

    David Runge - 2020-04-24

    @cannam thanks this works! :)

     

Log in to post a comment.