no full RELRO in piper-vamp-simple-server, sonic-visualiser and...
Brought to you by:
cannam
When building 4.0.1 for Arch Linux I ran our check tool namcap on it. All executables lack full RELRO:
sonic-visualiser W: ELF file ('usr/bin/piper-vamp-simple-server') lacks FULL RELRO, check LDFLAGS. sonic-visualiser W: ELF file ('usr/bin/sonic-visualiser') lacks FULL RELRO, check LDFLAGS. sonic-visualiser W: ELF file ('usr/bin/vamp-plugin-load-checker') lacks FULL RELRO, check LDFLAGS.
I was not yet able to figure out where exactly the build system(s) ignore the global LDFLAGS that we export in our package building system ("-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now"
).
This basically means: exported
$LDFLAGS
are completely ignored by the build system.I've by now tried setting
LDFLAGS_RELEASE
inconfigure.ac
to my globalLDFLAGS
, specifically exportingLDFLAGS
when calling configure and make and settingQMAKE_LFLAGS
to my globalLDFLAGS
.None of that works though
Bug in configure I think. Try this
@cannam thanks this works! :)