Package: sendmail Version: 8.14.1-10 Severity: serious Tags: patch Debugging the latest sendmail FTBFS on arm:
http://buildd.debian.org/fetch.cgi?pkg=sendmail;ver=8.14.1-10;arch=arm;stamp=1191538384 Turned out gcc-4.2 on arm does not work with -fstack-protector-all, which sendmail build sets on by default. On arm/armel A simple hello world will seggault if compiled with -fstack-protector-all, and thus configure does not believe the compiler works. Gcc manual puts -fstack-protector-all and -fstack-protector under the following section: This section includes experimental options that may produce broken code. Thus, I think it's appropriate to exlude arm cpu from this flag. --- sendmail-8.14.1.old/debian/rules 2007-10-12 20:02:52.000000000 +0000 +++ sendmail-8.14.1/debian/rules 2007-10-12 20:55:12.000000000 +0000 @@ -13,12 +13,20 @@ # Overridden below, but needed now #DEB_TAR_SRCDIR := . #include /usr/share/cdbs/1/rules/tarball.mk +DEB_HOST_GNU_CPU ?= $(shell dpkg-architecture -qDEB_HOST_GNU_CPU) + # Make it even harder to exploit sendmail. # Well, almost impossible now 8-) # * Compile all with -fPIC (works for pic or pie objects) # * Link with either -pie or -shared + +ifeq ($(DEB_HOST_GNU_CPU),arm) +MY_CFLAGS := -fPIC +else MY_CFLAGS := -fPIC -fstack-protector-all +endif + CFLAGS += ${MY_CFLAGS} export CFLAGS MY_LDFLAGS := -Wl,-z,noexecstack,-z,relro,-z,now -Wl,--warn-shared-textrel -- "rm -rf" only sounds scary if you don't have backups -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
