* [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
@ 2010-01-23 0:43 Michael Edenfield
2010-01-23 0:10 ` pageexec
2010-01-23 1:05 ` klondike
0 siblings, 2 replies; 3+ messages in thread
From: Michael Edenfield @ 2010-01-23 0:43 UTC (permalink / raw
To: gentoo-hardened
Ever since switching over to hardened-sources, I've been unable to build
OpenOffice from source. I have isolated the problem to PaX -- if I enable
softmode the build works fine. Otherwise, I get this in the build.log:
Making: libofficebean.so
/var/tmp/portage/app-office/openoffice-3.1.1/work/ooo/build/ooo310-
m19/solenv/bin/checkdll.sh: line 94: 6600 Segmentation fault $checkdll
"$@"
dmake: Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'
and a corresponding kernel error:
checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp
000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]
But this doesn't look like a typical PaX error message, so I'm not sure what
checkdll is doing that crashes. Anyone have an idea where I should start
looking?
--Mike
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
2010-01-23 0:43 [gentoo-hardened] Cannot build OpenOffice with PaX enabled Michael Edenfield
@ 2010-01-23 0:10 ` pageexec
2010-01-23 1:05 ` klondike
1 sibling, 0 replies; 3+ messages in thread
From: pageexec @ 2010-01-23 0:10 UTC (permalink / raw
To: gentoo-hardened
On 22 Jan 2010 at 19:43, Michael Edenfield wrote:
> dmake: Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'
>
> and a corresponding kernel error:
>
> checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp
> 000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]
>
> But this doesn't look like a typical PaX error message, so I'm not sure what
> checkdll is doing that crashes. Anyone have an idea where I should start
> looking?
this is likely the result of the RELRO enforcement i added last year
and a corresponding ld.so bug/feature where it tries to set a read-only
variable after RELRO has made the given area actually read-only (and
further write/mprotect attempts fail on it).
all this is the result of the fundamentally broken GNU_STACK 'feature'
and the best fix is to avoid generating RWE GNU_STACK headers in the
first place. you'll probably have to dig into the OO build system to
find out which .so got such a GNU_STACK header and where you can make
it disappear.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
2010-01-23 0:43 [gentoo-hardened] Cannot build OpenOffice with PaX enabled Michael Edenfield
2010-01-23 0:10 ` pageexec
@ 2010-01-23 1:05 ` klondike
1 sibling, 0 replies; 3+ messages in thread
From: klondike @ 2010-01-23 1:05 UTC (permalink / raw
To: gentoo-hardened
[-- Attachment #1: Type: text/plain, Size: 982 bytes --]
El 23/01/10 01:43, Michael Edenfield escribió:
> Ever since switching over to hardened-sources, I've been unable to build
> OpenOffice from source. I have isolated the problem to PaX -- if I enable
> softmode the build works fine. Otherwise, I get this in the build.log:
>
> Making: libofficebean.so
> /var/tmp/portage/app-office/openoffice-3.1.1/work/ooo/build/ooo310-
> m19/solenv/bin/checkdll.sh: line 94: 6600 Segmentation fault $checkdll
> "$@"
> dmake: Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'
>
> and a corresponding kernel error:
>
> checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp
> 000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]
>
> But this doesn't look like a typical PaX error message, so I'm not sure what
> checkdll is doing that crashes. Anyone have an idea where I should start
> looking?
>
I suggest disabling the java USE flag to begin with :)
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 262 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2010-01-23 1:11 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-01-23 0:43 [gentoo-hardened] Cannot build OpenOffice with PaX enabled Michael Edenfield
2010-01-23 0:10 ` pageexec
2010-01-23 1:05 ` klondike
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox