On Wed, Jul 15, 2015 at 05:02:42PM +0200, Petr Pisar wrote: > On Wed, Jul 08, 2015 at 02:25:11PM +0200, Petr Pisar wrote: > > You could read > > <http://permalink.gmane.org/gmane.linux.redhat.fedora.devel/208954> about > > poor implementation of Fedora 23 hardening feature. > > > > It turned out that perl is broken too. Fortunately, only /usr/bin/perl is > > broken. Not the libperl.so or any other XS modules. This issue is known as > > <https://bugzilla.redhat.com/show_bug.cgi?id=1238804>. > > > > Playing with perl's Configure arguments shows different options are used > > at different places and the best configuration looks like this (from > > perl.spec): > > > > -/bin/sh Configure -des -Doptimize="$RPM_OPT_FLAGS" \ > > - -Dccdlflags="-Wl,--enable-new-dtags" \ > > - -Dlddlflags="-shared $RPM_OPT_FLAGS $RPM_LD_FLAGS" \ > > +# ldflags is not used when linking XS modules. > > +# Only ldflags is used when linking miniperl. > > +# Only ccflags and ldflags are used for Configure's compiler checks. > > +# Set optimize=none to prevent from injecting upstream's value. > > +/bin/sh Configure -des \ > > + -Doptimize="none" \ > > + -Dccflags="$RPM_OPT_FLAGS" \ > > + -Dldflags="$RPM_LD_FLAGS" \ > > + -Dccdlflags="-Wl,--enable-new-dtags $RPM_LD_FLAGS" \ > > + -Dlddlflags="-shared $RPM_LD_FLAGS" \ > > > The change is in repositories and although almost everything works, we started > to get strange failures: > > perl-Algorithm-CurveFit (bug #1242769), a pure Perl code, fails a test on > x86_64 only. > > perl-smartmatch-engine-core (bug #1242802), an XS code which I retired, > segfaults. > Also perl-PDL-Graphics-PLplot segfauls on x86_64. I decided to disable hardening in perl.spec. Once the root cause is found and fixed, I will enable it again. -- Petr
Attachment:
pgpBlXt2zHw9D.pgp
Description: PGP signature
-- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/perl-devel
