[Pkg-openssl-devel] Bug#663977: Bug#663977: Bug#663977: libssl1.0.0: execmod failure on 1.0.0h-1 but not on 1.0.0g-1

[Kurt Roeckx]

On Wed, Mar 14, 2012 at 11:47:25PM +0100, Kurt Roeckx wrote:
> On Thu, Mar 15, 2012 at 01:10:00AM +1100, Russell Coker wrote:
> > Package: libssl1.0.0
> > Version: 1.0.0h-1
> > Severity: normal
> > 
> > # eu-findtextrel /usr/lib/i386-linux-gnu/i686/cmov/libcrypto.so.1.0.0
> > either the file containing the function 'OPENSSL_DIR_end' or the file 
> > containing the function 'OPENSSL_cleanse' is not compiled with -fpic/-fPIC
> > either the file containing the function 'OPENSSL_DIR_end' or the file 
> > containing the function 'OPENSSL_cleanse' is not compiled with -fpic/-fPIC
> > either the file containing the function 'OPENSSL_DIR_end' or the file 
> > containing the function 'OPENSSL_cleanse' is not compiled with -fpic/-fPIC
> 
> Which is weird since nothing seems to have changed related to it.
> 
> I also can't find mem_clr.c being compiled, while it used to be.
> 
> It used to have:
> # CPUID module collects small commonly used assembler snippets
> CPUID_OBJ= mem_clr.o
> 
> Which really doesn't make sense to me, and it's not doing that
> anymore in the latest version.

So the problem obviously is that x86cpuid.pl's OPENSSL_cleanse is
not PIC.

x86cpuid.pl is now used for all versions of the library, but it
should already have been present in the i686 version.  I wonder
why it never showed up before.


Kurt