From 3b3197d57982aac97241b6554c7c89ecd976f4367637d8af072ecde709a67ee7 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Tue, 29 Jun 2021 11:57:07 +0000 Subject: [PATCH] Accepting request 901465 from home:fbui:branches:Base:System - Avoid text relocation on i386 (bsc#1143125) Text relocation doesn't cope well with some security hardening which consists in prohibiting attempts to change memory mappings to become executable. Hence disable the use of assembler code and get rid of text relocations especially since the assembler code is slower than the code generated by gcc according to Fedora. According to Debian this also fixes gzip generating different results on ia64. OBS-URL: https://build.opensuse.org/request/show/901465 OBS-URL: https://build.opensuse.org/package/show/Base:System/gzip?expand=0&rev=82 --- gzip.changes | 14 ++++++++++++++ gzip.spec | 3 +++ 2 files changed, 17 insertions(+) diff --git a/gzip.changes b/gzip.changes index 89c1cb1..d312ba1 100644 --- a/gzip.changes +++ b/gzip.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Wed Jun 23 09:25:09 UTC 2021 - Franck Bui + +- Avoid text relocation on i386 (bsc#1143125) + + Text relocation doesn't cope well with some security hardening which + consists in prohibiting attempts to change memory mappings to become + executable. + + Hence disable the use of assembler code and get rid of text + relocations especially since the assembler code is slower than the + code generated by gcc according to Fedora. According to Debian this + also fixes gzip generating different results on ia64. + ------------------------------------------------------------------- Tue Apr 13 13:23:44 UTC 2021 - pgajdos@suse.com diff --git a/gzip.spec b/gzip.spec index ce7f1b1..1193e9a 100644 --- a/gzip.spec +++ b/gzip.spec @@ -76,6 +76,9 @@ export LDFLAGS="-pie" autoreconf -f -i export CFLAGS="$CFLAGS -DDFLTCC_LEVEL_MASK=0x7e" %endif +# Avoid text relocations on i386 as the assembler code (in +# lib/match.c) is not prepared for PIE (bsc#1143125). +export DEFS=NO_ASM %configure --disable-silent-rules \ gl_cv_func_printf_directive_n=yes \ gl_cv_func_printf_infinite_long_double=yes \