From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id EA8AD15808B for ; Thu, 7 Apr 2022 19:53:11 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 02761E0CA2; Thu, 7 Apr 2022 19:53:11 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 8DAD8E0CA2 for ; Thu, 7 Apr 2022 19:53:10 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id C247C3415C0 for ; Thu, 7 Apr 2022 19:53:08 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 0D84234F for ; Thu, 7 Apr 2022 19:53:07 +0000 (UTC) From: "Sam James" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sam James" Message-ID: <1649361119.256df48ff6e85ffa389cc2d25453d100279b62fe.sam@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: sys-libs/glibc/ X-VCS-Repository: repo/gentoo X-VCS-Files: sys-libs/glibc/glibc-2.34-r11.ebuild sys-libs/glibc/glibc-2.35-r2.ebuild sys-libs/glibc/glibc-9999.ebuild X-VCS-Directories: sys-libs/glibc/ X-VCS-Committer: sam X-VCS-Committer-Name: Sam James X-VCS-Revision: 256df48ff6e85ffa389cc2d25453d100279b62fe X-VCS-Branch: master Date: Thu, 7 Apr 2022 19:53:07 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: eb740f41-0c11-4d58-9974-6afb0dafdb56 X-Archives-Hash: a16b3023ee2d08b77af7e6e585e2bc41 commit: 256df48ff6e85ffa389cc2d25453d100279b62fe Author: Sam James gentoo org> AuthorDate: Thu Apr 7 19:51:59 2022 +0000 Commit: Sam James gentoo org> CommitDate: Thu Apr 7 19:51:59 2022 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=256df48f sys-libs/glibc: filter -fcf-protection Set USE=cet if you want this. glibc can't be built with this *everywhere*, and the configure option (controlled by USE=cet) sets it for the components for which it works. It's just like SSP and PIE. You can't force it on all of glibc, and we have mechanisms to do it properly (USE=cet). Closes: https://bugs.gentoo.org/830454 Signed-off-by: Sam James gentoo.org> sys-libs/glibc/glibc-2.34-r11.ebuild | 3 +++ sys-libs/glibc/glibc-2.35-r2.ebuild | 3 +++ sys-libs/glibc/glibc-9999.ebuild | 3 +++ 3 files changed, 9 insertions(+) diff --git a/sys-libs/glibc/glibc-2.34-r11.ebuild b/sys-libs/glibc/glibc-2.34-r11.ebuild index ff5bd4304774..3cf633bea543 100644 --- a/sys-libs/glibc/glibc-2.34-r11.ebuild +++ b/sys-libs/glibc/glibc-2.34-r11.ebuild @@ -440,6 +440,9 @@ setup_flags() { replace-flags -O0 -O1 filter-flags '-fstack-protector*' + + # See end of bug #830454; we handle this via USE=cet + filter-flags '-fcf-protection=' } use_multiarch() { diff --git a/sys-libs/glibc/glibc-2.35-r2.ebuild b/sys-libs/glibc/glibc-2.35-r2.ebuild index 6a0d35ce8ad5..22e2d5153f19 100644 --- a/sys-libs/glibc/glibc-2.35-r2.ebuild +++ b/sys-libs/glibc/glibc-2.35-r2.ebuild @@ -429,6 +429,9 @@ setup_flags() { replace-flags -O0 -O1 filter-flags '-fstack-protector*' + + # See end of bug #830454; we handle this via USE=cet + filter-flags '-fcf-protection=' } use_multiarch() { diff --git a/sys-libs/glibc/glibc-9999.ebuild b/sys-libs/glibc/glibc-9999.ebuild index 2483aefe5d6a..94842d8172b7 100644 --- a/sys-libs/glibc/glibc-9999.ebuild +++ b/sys-libs/glibc/glibc-9999.ebuild @@ -430,6 +430,9 @@ setup_flags() { replace-flags -O0 -O1 filter-flags '-fstack-protector*' + + # See end of bug #830454; we handle this via USE=cet + filter-flags '-fcf-protection=' } use_multiarch() {