Re: problem resolving foreign function (I think)
Russ Tyndall <[email protected]> Wed, 18 Mar 2015 11:01:49 -0400
| Newsgroups | gmane.lisp.clsql.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--===============0054507934==
Content-Type: multipart/alternative;
boundary="------------010105010703070505030609"
This is a multi-part message in MIME format.
--------------010105010703070505030609
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
First congrats on solving the problem, hopefully we can get your change
committed soon so that others do not also fall victim.
I see this is something that Kevin added as part of the most recent
6.6.0 release.
http://git.b9.com/?p=clsql.git;a=commit;h=a646f558b54191eda1d64f2926eee7b4fa763f89
Based on the docs you sent it seems like the following will cause the
file to build on your system with no loss of security (because it says
"Shared libraries already do this (-fPIC)")
`DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie`
Both options seem build/load on my Ubuntu 64bit system, so if this
solves your problem, I will commit a patch fixing this option in the
build file.
Thanks so much for figuring this out, I am sure others will be affected
and it was invisible to me.
Cheers,
Russ Tyndall
Acceleration.net
> I see that the -pie flag is set for ld because of this line in
> db-mysql/Makefile:
>
> LDFLAGS:=$(LDFLAGS) $(shell env
> DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get
> LDFLAGS | sed "s/-Wl\|,/ /ig"
>
--------------010105010703070505030609
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by boa.b9.com id t2IF1rHf006733
<html>
<head>
<meta content=3D"text/html; charset=3Dwindows-1252"
http-equiv=3D"Content-Type">
</head>
<body bgcolor=3D"#FFFFFF" text=3D"#000000">
First congrats on solving the problem, hopefully we can get your
change committed soon so that others do not also fall victim.<br>
<br>
I see this is something that Kevin added as part of the most recent
6.6.0 release.<br>
<a class=3D"moz-txt-link-freetext" href=3D"http://git.b9.com/?p=3Dclsql.g=
it;a=3Dcommit;h=3Da646f558b54191eda1d64f2926eee7b4fa763f89">http://git.b9=
.com/?p=3Dclsql.git;a=3Dcommit;h=3Da646f558b54191eda1d64f2926eee7b4fa763f=
89</a><br>
<br>
Based on the docs you sent it seems like the following will cause
the file to build on your system with no loss of security (because
it says "Shared libraries already do this=A0 (-fPIC)")<br>
<br>
`DEB_BUILD_MAINT_OPTIONS=3Dhardening=3D+all,-pie`<br>
<br>
Both options seem build/load on my Ubuntu 64bit system, so if this
solves your problem, I will commit a patch fixing this option in the
build file.<br>
<br>
Thanks so much for figuring this out, I am sure others will be
affected and it was invisible to me.<br>
<br>
Cheers,<br>
Russ Tyndall<br>
Acceleration.net<br>
<br>
<br>
<blockquote cite=3D"mid:[email protected]" type=3D"cite"> I =
see
that the -pie flag is set for ld because of this line in
db-mysql/Makefile:<br>
<br>
<blockquote>LDFLAGS:=3D$(LDFLAGS) $(shell env
DEB_BUILD_MAINT_OPTIONS=3Dhardening=3D+all dpkg-buildflags --get
LDFLAGS | sed "s/-Wl\|,/ /ig" </blockquote>
</blockquote>
<br>
</body>
</html>
--------------010105010703070505030609--
--===============0054507934==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
_______________________________________________
CLSQL mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/clsql
--===============0054507934==--