public inbox for gentoo-hardened@lists.gentoo.org
 help / color / mirror / Atom feed
* Re: [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
  2010-01-23  0:43 [gentoo-hardened] Cannot build OpenOffice with PaX enabled Michael Edenfield
@ 2010-01-23  0:10 ` pageexec
  2010-01-23  1:05 ` klondike
  1 sibling, 0 replies; 3+ messages in thread
From: pageexec @ 2010-01-23  0:10 UTC (permalink / raw
  To: gentoo-hardened

On 22 Jan 2010 at 19:43, Michael Edenfield wrote:

> dmake:  Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'
> 
> and a corresponding kernel error:
> 
> checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp 
> 000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]                  
> 
> But this doesn't look like a typical PaX error message, so I'm not sure what 
> checkdll is doing that crashes.  Anyone have an idea where I should start 
> looking?

this is likely the result of the RELRO enforcement i added last year
and a corresponding ld.so bug/feature where it tries to set a read-only
variable after RELRO has made the given area actually read-only (and
further write/mprotect attempts fail on it).

all this is the result of the fundamentally broken GNU_STACK 'feature'
and the best fix is to avoid generating RWE GNU_STACK headers in the
first place. you'll probably have to dig into the OO build system to
find out which .so got such a GNU_STACK header and where you can make
it disappear.




^ permalink raw reply	[flat|nested] 3+ messages in thread

* [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
@ 2010-01-23  0:43 Michael Edenfield
  2010-01-23  0:10 ` pageexec
  2010-01-23  1:05 ` klondike
  0 siblings, 2 replies; 3+ messages in thread
From: Michael Edenfield @ 2010-01-23  0:43 UTC (permalink / raw
  To: gentoo-hardened

Ever since switching over to hardened-sources, I've been unable to build 
OpenOffice from source.  I have isolated the problem to PaX -- if I enable 
softmode the build works fine.  Otherwise, I get this in the build.log:

Making:    libofficebean.so
/var/tmp/portage/app-office/openoffice-3.1.1/work/ooo/build/ooo310-
m19/solenv/bin/checkdll.sh: line 94:  6600 Segmentation fault      $checkdll 
"$@"
dmake:  Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'

and a corresponding kernel error:

checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp 
000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]                  

But this doesn't look like a typical PaX error message, so I'm not sure what 
checkdll is doing that crashes.  Anyone have an idea where I should start 
looking?

--Mike



^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [gentoo-hardened] Cannot build OpenOffice with PaX enabled...
  2010-01-23  0:43 [gentoo-hardened] Cannot build OpenOffice with PaX enabled Michael Edenfield
  2010-01-23  0:10 ` pageexec
@ 2010-01-23  1:05 ` klondike
  1 sibling, 0 replies; 3+ messages in thread
From: klondike @ 2010-01-23  1:05 UTC (permalink / raw
  To: gentoo-hardened

[-- Attachment #1: Type: text/plain, Size: 982 bytes --]

El 23/01/10 01:43, Michael Edenfield escribió:
> Ever since switching over to hardened-sources, I've been unable to build 
> OpenOffice from source.  I have isolated the problem to PaX -- if I enable 
> softmode the build works fine.  Otherwise, I get this in the build.log:
>
> Making:    libofficebean.so
> /var/tmp/portage/app-office/openoffice-3.1.1/work/ooo/build/ooo310-
> m19/solenv/bin/checkdll.sh: line 94:  6600 Segmentation fault      $checkdll 
> "$@"
> dmake:  Error code 1, while making '../../unxlngx6.pro/lib/libofficebean.so'
>
> and a corresponding kernel error:
>
> checkdll[6600]: segfault at 2c02baf83d80 ip 00002c02bad6ce79 sp 
> 000072408b6dbe90 error 7 in ld-2.11.so[2c02bad66000+1e000]                  
>
> But this doesn't look like a typical PaX error message, so I'm not sure what 
> checkdll is doing that crashes.  Anyone have an idea where I should start 
> looking?
>   
I suggest disabling the java USE flag to begin with :)


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 262 bytes --]

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2010-01-23  1:11 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-01-23  0:43 [gentoo-hardened] Cannot build OpenOffice with PaX enabled Michael Edenfield
2010-01-23  0:10 ` pageexec
2010-01-23  1:05 ` klondike

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox