diff --git a/gzip.changes b/gzip.changes index 89c1cb1..d312ba1 100644 --- a/gzip.changes +++ b/gzip.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Wed Jun 23 09:25:09 UTC 2021 - Franck Bui + +- Avoid text relocation on i386 (bsc#1143125) + + Text relocation doesn't cope well with some security hardening which + consists in prohibiting attempts to change memory mappings to become + executable. + + Hence disable the use of assembler code and get rid of text + relocations especially since the assembler code is slower than the + code generated by gcc according to Fedora. According to Debian this + also fixes gzip generating different results on ia64. + ------------------------------------------------------------------- Tue Apr 13 13:23:44 UTC 2021 - pgajdos@suse.com diff --git a/gzip.spec b/gzip.spec index ce7f1b1..1193e9a 100644 --- a/gzip.spec +++ b/gzip.spec @@ -76,6 +76,9 @@ export LDFLAGS="-pie" autoreconf -f -i export CFLAGS="$CFLAGS -DDFLTCC_LEVEL_MASK=0x7e" %endif +# Avoid text relocations on i386 as the assembler code (in +# lib/match.c) is not prepared for PIE (bsc#1143125). +export DEFS=NO_ASM %configure --disable-silent-rules \ gl_cv_func_printf_directive_n=yes \ gl_cv_func_printf_infinite_long_double=yes \