[pkg-gnupg-maint] Bug#879014: gpgme1.0: FTBFS on some arches: Qt needs a compile with -fPIC (PIE is not enough), hardening downgrades to PIE

[Daniel Kahn Gillmor]

Control: affects 879014 + dpkg src:qtbase-opensource-src
Control: tags 879014 + patch

Hi folks--

Further conversation about problems compiling and linking against Qt and
GPGME in debian suggest that the problem might be related to dpkg's
default spec files, and confused by Qt's compiler warnings.

I'm attaching a patch to dpkg which (i think) reflects the fix proposed
by Guillem Jover (in cc):

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Use-self_spec-instead-of-self_spec.patch
Type: text/x-diff
Size: 1793 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20200701/326b7bd9/attachment.patch>
-------------- next part --------------

gniibe also identified a problem in how Qt reports compilation warnings
related to the PIE/PIC mismatch.  I've tried to address that in the
following patch to qtbase-opensource-src:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Clarify-warning-message-about-PIC-PIE.patch
Type: text/x-diff
Size: 1354 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20200701/326b7bd9/attachment-0001.patch>
-------------- next part --------------

If either of these two fixes are not appropriate to help resolve the
problem, i'd appreciate help in figuring out what the right fixes are.

I am not an expert in either Qt or dpkg, so pointers and explanations
are welcome.

Regards,

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20200701/326b7bd9/attachment.sig>