[pkg-golang-devel] Bug#837485: golang-1.6: FTBFS with bindnow and PIE enabled
Niels Thykier
niels at thykier.net
Mon Oct 31 19:18:00 UTC 2016
On Mon, 12 Sep 2016 00:55:37 +0200 Balint Reczey
<balint at balintreczey.hu> wrote:
> Source: golang-1.6
> Version: 1.6.3-1
> Severity: important
> User: balint at balintreczey.hu
> Usertags: pie-bindnow-20160906
> Justification: FTBFS on amd64 with extra hardening
> Tags: patch
>
> Hi,
>
> During a rebuild of all packages in sid, your package failed to build on
> amd64 with patched GCC and dpkg.
>
> The rebuild tested if packages are ready for a transition
> enabling PIE and bindnow for amd64.
>
> For more information about the changes to sid's dpkg and GCC please
> visit:
> https://wiki.debian.org/Hardening/PIEByDefaultTransition
>
> Relevant part (hopefully):
> ...
> [...]
Dear maintainers,
The thread-sanitizer (used by golang) is not compatible with PIE[1].
* Please disable either PIE or the thread-sanitizer.
* From a quick look, it appears that the thread-sanitizer is done by
upstream.
* On that basis, I think we should prefer that over PIE in the given
case (for consistency with upstream).
Thanks,
~Niels
[1] https://wiki.ubuntu.com/SecurityTeam/PIE
More information about the pkg-golang-devel
mailing list