https://bugzilla.redhat.com/show_bug.cgi?id=2293272 --- Comment #23 from Jakub Jelinek <jakub@xxxxxxxxxx> --- Updates below: Spec URL: https://jakub.fedorapeople.org/gcc13/gcc13.spec SRPM URL: https://jakub.fedorapeople.org/gcc13/gcc13-13.3.1-2.1.fc40.src.rpm Scratch build: https://koji.fedoraproject.org/koji/taskinfo?taskID=120291744 Will see if that builds. Typo: "# For VTA guality testing" This is not a typo, it is a (made up) term used for gcc debug info quality testing (-g quality). gcc13.spec:152: W: unversioned-explicit-provides bundled(libiberty) That is intentional, libiberty isn't versioned in any way (and gcc is the master at least for GNU projects). gcc13.spec:153: W: unversioned-explicit-provides bundled(libbacktrace) Ditto. gcc13.spec:154: W: unversioned-explicit-provides bundled(libffi) While there is upstream libffi, there is divergence between the gcc and upstream libffi version, what exactly is newer differed many times in the history. Not that it matters for this package much because libffi is used just in ObjC or Go etc. support. gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libatomic.a gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libgcc.a gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libgcc_eh.a gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libgcov.a gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libgomp.a gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libitm.a gcc13.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libquadmath.a gcc13-c++.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libstdc++.a gcc13-c++.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libstdc++exp.a gcc13-c++.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libstdc++fs.a gcc13-c++.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libsupc++.a gcc13-gfortran.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libcaf_single.a gcc13-gfortran.x86_64: E: static-library-without-debuginfo /usr/lib/gcc/x86_64-redhat-linux/13/libgfortran.a That is what the system gcc does normally too, in that case it also provides variants with debug info in the debuginfo packages, but I think that isn't worth it for this package. gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/cpp-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcc-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcc-ar-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcc-nm-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcc-ranlib-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcov-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcov-dump-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/gcov-tool-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/lto-dump-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/bin/x86_64-redhat-linux-gcc-13 gcc13.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/cc1 gcc13.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/collect2 gcc13.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/lto-wrapper gcc13.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/lto1 gcc13-c++.x86_64: W: position-independent-executable-suggested /usr/bin/g++-13 gcc13-c++.x86_64: W: position-independent-executable-suggested /usr/bin/x86_64-redhat-linux-c++-13 gcc13-c++.x86_64: W: position-independent-executable-suggested /usr/bin/x86_64-redhat-linux-g++-13 gcc13-c++.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/cc1plus gcc13-c++.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/g++-mapper-server gcc13-gfortran.x86_64: W: position-independent-executable-suggested /usr/bin/gfortran-13 gcc13-gfortran.x86_64: W: position-independent-executable-suggested /usr/libexec/gcc/x86_64-redhat-linux/13/f951 Intentional, PIE slows the compiler too much and doesn't have any benefits for it, there were no exploitable buffer overflows in the compiler for the last 25 years, I think a single non-exploitable one during that time, compiler is supposed to be invoked without elevated priviledges and if it is invoked on untrusted random sources, one better sandboxes it and limits it for compile time as well as memory, because even very small sources can result in weeks long compilation times and consumption of gigabytes of memory. gcc13.x86_64: W: no-manual-page-for-binary gcc-ar-13 gcc13.x86_64: W: no-manual-page-for-binary gcc-nm-13 gcc13.x86_64: W: no-manual-page-for-binary gcc-ranlib-13 gcc13.x86_64: W: no-manual-page-for-binary x86_64-redhat-linux-gcc-13 Intentional. gcc13.x86_64: W: files-duplicate /usr/lib/gcc/x86_64-redhat-linux/13/crtendS.o /usr/lib/gcc/x86_64-redhat-linux/13/crtend.o gcc13-c++.x86_64: W: files-duplicate /usr/include/c++/13/ext/hash_map /usr/include/c++/13/backward/hash_map gcc13-c++.x86_64: W: files-duplicate /usr/include/c++/13/ext/hash_set /usr/include/c++/13/backward/hash_set gcc13-c++.x86_64: W: files-duplicate /usr/include/c++/13/x86_64-redhat-linux/bits/gthr-posix.h /usr/include/c++/13/x86_64-redhat-linux/bits/gthr-default.h Intentional. gcc13.x86_64: W: devel-file-in-non-devel-package /usr/lib/gcc/x86_64-redhat-linux/13/include/acc_prof.h gcc13.x86_64: W: devel-file-in-non-devel-package /usr/lib/gcc/x86_64-redhat-linux/13/include/adxintrin.h ... Intentional. gcc13.x86_64: E: devel-dependency glibc-devel gcc13-c++.x86_64: E: devel-dependency libstdc++-devel gcc13-gfortran.x86_64: E: devel-dependency libquadmath-devel Intentional. gcc13.spec:333: W: configure-without-libdir-spec gcc13.spec:380: W: configure-without-libdir-spec Intentional. -- You are receiving this mail because: You are always notified about changes to this product and component You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2293272 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202293272%23c23 -- _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
