DC-Build-Header: hardening-wrapper 2.5 / 2014-06-17 15:20:48 +0000 DC-Task: source:hardening-wrapper version:2.5 architecture:any chroot:unstable esttime:124 logfile:/tmp/hardening-wrapper_2.5_unstable_clang.log modes:binary-only:parallel:clang DC-Sbuild-call: su user -c 'sbuild -n --apt-update -d unstable -v --chroot-setup-commands=/tmp/switch-to-clang --append-to-version "clang1" --maintainer "Lucas Nussbaum " --uploader "Lucas Nussbaum " hardening-wrapper_2.5' sbuild (Debian sbuild) 0.63.2 (18 Aug 2012) on ip-172-31-15-75.us-west-2.compute.internal ╔══════════════════════════════════════════════════════════════════════════════╗ ║ hardening-wrapper 2.5clang1 (amd64) 17 Jun 2014 15:20 ║ ╚══════════════════════════════════════════════════════════════════════════════╝ Package: hardening-wrapper Version: 2.5clang1 Source Version: 2.5 Distribution: unstable Machine Architecture: amd64 Host Architecture: amd64 Build Architecture: amd64 I: NOTICE: Log filtering will replace 'build/hardening-wrapper-XnyiqA/hardening-wrapper-2.5clang1' with '«PKGBUILDDIR»' I: NOTICE: Log filtering will replace 'build/hardening-wrapper-XnyiqA' with '«BUILDDIR»' I: NOTICE: Log filtering will replace 'var/lib/schroot/mount/unstable-amd64-sbuild-f1dc1019-9e8c-4716-a5e4-3ff56d49eab6' with '«CHROOT»' ┌──────────────────────────────────────────────────────────────────────────────┐ │ Update chroot │ └──────────────────────────────────────────────────────────────────────────────┘ Get:1 http://localhost:9999 unstable InRelease [206 kB] Get:2 http://localhost:9999 unstable/main Sources/DiffIndex [7876 B] Get:3 http://localhost:9999 unstable/main amd64 Packages/DiffIndex [7876 B] Get:4 http://localhost:9999 unstable/main Translation-en/DiffIndex [7876 B] Get:5 http://localhost:9999 unstable/main 2014-06-16-2054.31.pdiff [15.4 kB] Get:6 http://localhost:9999 unstable/main 2014-06-17-0253.05.pdiff [7983 B] Get:7 http://localhost:9999 unstable/main 2014-06-17-0856.27.pdiff [7757 B] Get:8 http://localhost:9999 unstable/main amd64 2014-06-16-2054.31.pdiff [20.7 kB] Get:9 http://localhost:9999 unstable/main amd64 2014-06-17-0253.05.pdiff [38.6 kB] Get:10 http://localhost:9999 unstable/main 2014-06-17-0856.27.pdiff [7757 B] Get:11 http://localhost:9999 unstable/main amd64 2014-06-17-0856.27.pdiff [9018 B] Get:12 http://localhost:9999 unstable/main 2014-06-16-2054.31.pdiff [699 B] Get:13 http://localhost:9999 unstable/main 2014-06-17-0856.27.pdiff [442 B] Get:14 http://localhost:9999 unstable/main amd64 2014-06-17-0856.27.pdiff [9018 B] Get:15 http://localhost:9999 unstable/main 2014-06-17-0856.27.pdiff [442 B] Fetched 330 kB in 4s (69.9 kB/s) Reading package lists... Reading package lists... Building dependency tree... Reading state information... The following packages will be upgraded: libc-bin libc-dev-bin libc6 libc6-dev linux-libc-dev multiarch-support 6 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 9447 kB of archives. After this operation, 10.2 kB of additional disk space will be used. Get:1 http://localhost:9999/debian/ unstable/main libc6-dev amd64 2.19-2 [2000 kB] Get:2 http://localhost:9999/debian/ unstable/main libc-dev-bin amd64 2.19-2 [235 kB] Get:3 http://localhost:9999/debian/ unstable/main linux-libc-dev amd64 3.14.7-1 [937 kB] Get:4 http://localhost:9999/debian/ unstable/main libc-bin amd64 2.19-2 [1288 kB] Get:5 http://localhost:9999/debian/ unstable/main libc6 amd64 2.19-2 [4816 kB] Get:6 http://localhost:9999/debian/ unstable/main multiarch-support amd64 2.19-2 [171 kB] debconf: delaying package configuration, since apt-utils is not installed Fetched 9447 kB in 0s (37.1 MB/s) (Reading database ... 14215 files and directories currently installed.) Preparing to unpack .../libc6-dev_2.19-2_amd64.deb ... Unpacking libc6-dev:amd64 (2.19-2) over (2.19-1) ... Preparing to unpack .../libc-dev-bin_2.19-2_amd64.deb ... Unpacking libc-dev-bin (2.19-2) over (2.19-1) ... Preparing to unpack .../linux-libc-dev_3.14.7-1_amd64.deb ... Unpacking linux-libc-dev:amd64 (3.14.7-1) over (3.14.5-1) ... Preparing to unpack .../libc-bin_2.19-2_amd64.deb ... Unpacking libc-bin (2.19-2) over (2.19-1) ... Preparing to unpack .../libc6_2.19-2_amd64.deb ... Unpacking libc6:amd64 (2.19-2) over (2.19-1) ... Setting up libc6:amd64 (2.19-2) ... Setting up libc-bin (2.19-2) ... (Reading database ... 14216 files and directories currently installed.) Preparing to unpack .../multiarch-support_2.19-2_amd64.deb ... Unpacking multiarch-support (2.19-2) over (2.19-1) ... Setting up multiarch-support (2.19-2) ... Setting up libc-dev-bin (2.19-2) ... Setting up linux-libc-dev:amd64 (3.14.7-1) ... Setting up libc6-dev:amd64 (2.19-2) ... ┌──────────────────────────────────────────────────────────────────────────────┐ │ Fetch source files │ └──────────────────────────────────────────────────────────────────────────────┘ Check APT ───────── Checking available source versions... Download source files with APT ────────────────────────────── Reading package lists... Building dependency tree... Reading state information... NOTICE: 'hardening-wrapper' packaging is maintained in the 'Bzr' version control system at: http://anonscm.debian.org/bzr/hardening/master Please use: bzr branch http://anonscm.debian.org/bzr/hardening/master to retrieve the latest (possibly unreleased) updates to the package. Need to get 23.0 kB of source archives. Get:1 http://localhost:9999/debian/ unstable/main hardening-wrapper 2.5 (dsc) [1860 B] Get:2 http://localhost:9999/debian/ unstable/main hardening-wrapper 2.5 (tar) [21.2 kB] Fetched 23.0 kB in 0s (40.9 kB/s) Download complete and in download only mode Check arch ────────── ┌──────────────────────────────────────────────────────────────────────────────┐ │ Chroot Setup Commands │ └──────────────────────────────────────────────────────────────────────────────┘ /tmp/switch-to-clang ──────────────────── + echo 'Entering customization script...' Entering customization script... + echo 'Install of clang-3.4' Install of clang-3.4 + apt-get update Hit http://localhost:9999 unstable InRelease Hit http://localhost:9999 unstable/main Sources/DiffIndex Hit http://localhost:9999 unstable/main amd64 Packages/DiffIndex Hit http://localhost:9999 unstable/main Translation-en/DiffIndex Reading package lists... + apt-get install --yes --no-install-recommends --force-yes clang-3.4 Reading package lists... Building dependency tree... Reading state information... The following extra packages will be installed: libclang-common-3.4-dev libclang1-3.4 libffi6 libllvm3.4 libobjc-4.9-dev libobjc4 Suggested packages: gnustep gnustep-devel Recommended packages: llvm-3.4-dev python The following NEW packages will be installed: clang-3.4 libclang-common-3.4-dev libclang1-3.4 libffi6 libllvm3.4 libobjc-4.9-dev libobjc4 0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded. Need to get 30.6 MB of archives. After this operation, 118 MB of additional disk space will be used. Get:1 http://localhost:9999/debian/ unstable/main libffi6 amd64 3.1-2 [19.8 kB] Get:2 http://localhost:9999/debian/ unstable/main libllvm3.4 amd64 1:3.4.2-2 [6721 kB] Get:3 http://localhost:9999/debian/ unstable/main libobjc4 amd64 4.9.0-6 [112 kB] Get:4 http://localhost:9999/debian/ unstable/main libobjc-4.9-dev amd64 4.9.0-6 [372 kB] Get:5 http://localhost:9999/debian/ unstable/main libclang1-3.4 amd64 1:3.4.2-2 [3619 kB] Get:6 http://localhost:9999/debian/ unstable/main libclang-common-3.4-dev amd64 1:3.4.2-2 [543 kB] Get:7 http://localhost:9999/debian/ unstable/main clang-3.4 amd64 1:3.4.2-2 [19.2 MB] debconf: delaying package configuration, since apt-utils is not installed Fetched 30.6 MB in 0s (37.5 MB/s) Selecting previously unselected package libffi6:amd64. (Reading database ... 14216 files and directories currently installed.) Preparing to unpack .../libffi6_3.1-2_amd64.deb ... Unpacking libffi6:amd64 (3.1-2) ... Selecting previously unselected package libllvm3.4:amd64. Preparing to unpack .../libllvm3.4_1%3a3.4.2-2_amd64.deb ... Unpacking libllvm3.4:amd64 (1:3.4.2-2) ... Selecting previously unselected package libobjc4:amd64. Preparing to unpack .../libobjc4_4.9.0-6_amd64.deb ... Unpacking libobjc4:amd64 (4.9.0-6) ... Selecting previously unselected package libobjc-4.9-dev:amd64. Preparing to unpack .../libobjc-4.9-dev_4.9.0-6_amd64.deb ... Unpacking libobjc-4.9-dev:amd64 (4.9.0-6) ... Selecting previously unselected package libclang1-3.4:amd64. Preparing to unpack .../libclang1-3.4_1%3a3.4.2-2_amd64.deb ... Unpacking libclang1-3.4:amd64 (1:3.4.2-2) ... Selecting previously unselected package libclang-common-3.4-dev. Preparing to unpack .../libclang-common-3.4-dev_1%3a3.4.2-2_amd64.deb ... Unpacking libclang-common-3.4-dev (1:3.4.2-2) ... Selecting previously unselected package clang-3.4. Preparing to unpack .../clang-3.4_1%3a3.4.2-2_amd64.deb ... Unpacking clang-3.4 (1:3.4.2-2) ... Setting up libffi6:amd64 (3.1-2) ... Setting up libllvm3.4:amd64 (1:3.4.2-2) ... Setting up libobjc4:amd64 (4.9.0-6) ... Setting up libobjc-4.9-dev:amd64 (4.9.0-6) ... Setting up libclang1-3.4:amd64 (1:3.4.2-2) ... Setting up libclang-common-3.4-dev (1:3.4.2-2) ... Setting up clang-3.4 (1:3.4.2-2) ... Processing triggers for libc-bin (2.19-2) ... + echo 'Replace gcc, g++ & cpp by clang' Replace gcc, g++ & cpp by clang + VERSIONS='4.6 4.7 4.8 4.9' + cd /usr/bin + for VERSION in '$VERSIONS' + rm -f g++-4.6 gcc-4.6 cpp-4.6 + ln -s clang++ g++-4.6 + ln -s clang gcc-4.6 + ln -s clang cpp-4.6 + echo 'gcc-4.6 hold' + dpkg --set-selections + echo 'g++-4.6 hold' + dpkg --set-selections + for VERSION in '$VERSIONS' + rm -f g++-4.7 gcc-4.7 cpp-4.7 + ln -s clang++ g++-4.7 + ln -s clang gcc-4.7 + ln -s clang cpp-4.7 + echo 'gcc-4.7 hold' + dpkg --set-selections + echo 'g++-4.7 hold' + dpkg --set-selections + for VERSION in '$VERSIONS' + rm -f g++-4.8 gcc-4.8 cpp-4.8 + ln -s clang++ g++-4.8 + ln -s clang gcc-4.8 + ln -s clang cpp-4.8 + echo 'gcc-4.8 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: gcc-4.8 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + echo 'g++-4.8 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: g++-4.8 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + for VERSION in '$VERSIONS' + rm -f g++-4.9 gcc-4.9 cpp-4.9 + ln -s clang++ g++-4.9 + ln -s clang gcc-4.9 + ln -s clang cpp-4.9 + echo 'gcc-4.9 hold' + dpkg --set-selections + echo 'g++-4.9 hold' + dpkg --set-selections + cd - /«BUILDDIR» + echo 'Check if gcc, g++ & cpp are actually clang' Check if gcc, g++ & cpp are actually clang + gcc --version + grep clang + cpp --version + grep clang + g++ --version + grep clang I: Finished running '/tmp/switch-to-clang'. Finished processing commands. ──────────────────────────────────────────────────────────────────────────────── Merged Build-Depends: build-essential, fakeroot Filtered Build-Depends: build-essential, fakeroot dpkg-deb: building package `sbuild-build-depends-core-dummy' in `/«BUILDDIR»/resolver-5C4qRB/apt_archive/sbuild-build-depends-core-dummy.deb'. OK Reading package lists... ┌──────────────────────────────────────────────────────────────────────────────┐ │ Install core build dependencies (apt-based resolver) │ └──────────────────────────────────────────────────────────────────────────────┘ Installing build dependencies Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: sbuild-build-depends-core-dummy debconf: delaying package configuration, since apt-utils is not installed 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0 B/818 B of archives. After this operation, 0 B of additional disk space will be used. Selecting previously unselected package sbuild-build-depends-core-dummy. (Reading database ... 14431 files and directories currently installed.) Preparing to unpack .../sbuild-build-depends-core-dummy.deb ... Unpacking sbuild-build-depends-core-dummy (0.invalid.0) ... Setting up sbuild-build-depends-core-dummy (0.invalid.0) ... Merged Build-Depends: base-files, base-passwd, bash, bsdutils, coreutils, dash, debianutils, diffutils, dpkg, e2fsprogs, findutils, grep, gzip, hostname, libc-bin, login, mount, ncurses-base, ncurses-bin, perl-base, sed, sysvinit, sysvinit-utils, tar, util-linux, libc6-dev | libc-dev, gcc (>= 4:4.4.3), g++ (>= 4:4.4.3), make, dpkg-dev (>= 1.13.5), debhelper (>= 9), perl-base (>= 5.10) Filtered Build-Depends: base-files, base-passwd, bash, bsdutils, coreutils, dash, debianutils, diffutils, dpkg, e2fsprogs, findutils, grep, gzip, hostname, libc-bin, login, mount, ncurses-base, ncurses-bin, perl-base, sed, sysvinit, sysvinit-utils, tar, util-linux, libc6-dev, gcc (>= 4:4.4.3), g++ (>= 4:4.4.3), make, dpkg-dev (>= 1.13.5), debhelper (>= 9), perl-base (>= 5.10) dpkg-deb: building package `sbuild-build-depends-hardening-wrapper-dummy' in `/«BUILDDIR»/resolver-F1lvnO/apt_archive/sbuild-build-depends-hardening-wrapper-dummy.deb'. OK Reading package lists... ┌──────────────────────────────────────────────────────────────────────────────┐ │ Install hardening-wrapper build dependencies (apt-based resolver) │ └──────────────────────────────────────────────────────────────────────────────┘ Installing build dependencies Reading package lists... Building dependency tree... Reading state information... The following extra packages will be installed: bsdmainutils debhelper file gettext gettext-base groff-base intltool-debian libasprintf0c2 libcroco3 libglib2.0-0 libmagic1 libpipeline1 libunistring0 libxml2 man-db po-debconf Suggested packages: wamerican wordlist whois vacation dh-make gettext-doc groff less www-browser libmail-box-perl Recommended packages: curl wget lynx-cur autopoint libasprintf-dev libgettextpo-dev libglib2.0-data shared-mime-info xml-core libmail-sendmail-perl The following NEW packages will be installed: bsdmainutils debhelper file gettext gettext-base groff-base intltool-debian libasprintf0c2 libcroco3 libglib2.0-0 libmagic1 libpipeline1 libunistring0 libxml2 man-db po-debconf sbuild-build-depends-hardening-wrapper-dummy 0 upgraded, 17 newly installed, 0 to remove and 0 not upgraded. Need to get 8621 kB/8622 kB of archives. After this operation, 26.0 MB of additional disk space will be used. Get:1 http://localhost:9999/debian/ unstable/main libpipeline1 amd64 1.3.0-1 [25.8 kB] Get:2 http://localhost:9999/debian/ unstable/main groff-base amd64 1.22.2-5 [1043 kB] Get:3 http://localhost:9999/debian/ unstable/main bsdmainutils amd64 9.0.5 [211 kB] Get:4 http://localhost:9999/debian/ unstable/main man-db amd64 2.6.7.1-1 [990 kB] Get:5 http://localhost:9999/debian/ unstable/main libasprintf0c2 amd64 0.18.3.2-2 [29.4 kB] Get:6 http://localhost:9999/debian/ unstable/main libmagic1 amd64 1:5.19-1 [237 kB] Get:7 http://localhost:9999/debian/ unstable/main libxml2 amd64 2.9.1+dfsg1-3 [791 kB] Get:8 http://localhost:9999/debian/ unstable/main libglib2.0-0 amd64 2.40.0-3 [2405 kB] Get:9 http://localhost:9999/debian/ unstable/main libcroco3 amd64 0.6.8-2 [133 kB] Get:10 http://localhost:9999/debian/ unstable/main libunistring0 amd64 0.9.3-5 [434 kB] Get:11 http://localhost:9999/debian/ unstable/main file amd64 1:5.19-1 [58.0 kB] Get:12 http://localhost:9999/debian/ unstable/main gettext-base amd64 0.18.3.2-2 [116 kB] Get:13 http://localhost:9999/debian/ unstable/main gettext amd64 0.18.3.2-2 [1202 kB] Get:14 http://localhost:9999/debian/ unstable/main intltool-debian all 0.35.0+20060710.1 [30.8 kB] Get:15 http://localhost:9999/debian/ unstable/main po-debconf all 1.0.16+nmu2 [224 kB] Get:16 http://localhost:9999/debian/ unstable/main debhelper all 9.20140613 [692 kB] debconf: delaying package configuration, since apt-utils is not installed Fetched 8621 kB in 0s (33.7 MB/s) Selecting previously unselected package libpipeline1:amd64. (Reading database ... 14431 files and directories currently installed.) Preparing to unpack .../libpipeline1_1.3.0-1_amd64.deb ... Unpacking libpipeline1:amd64 (1.3.0-1) ... Selecting previously unselected package groff-base. Preparing to unpack .../groff-base_1.22.2-5_amd64.deb ... Unpacking groff-base (1.22.2-5) ... Selecting previously unselected package bsdmainutils. Preparing to unpack .../bsdmainutils_9.0.5_amd64.deb ... Unpacking bsdmainutils (9.0.5) ... Selecting previously unselected package man-db. Preparing to unpack .../man-db_2.6.7.1-1_amd64.deb ... Unpacking man-db (2.6.7.1-1) ... Selecting previously unselected package libasprintf0c2:amd64. Preparing to unpack .../libasprintf0c2_0.18.3.2-2_amd64.deb ... Unpacking libasprintf0c2:amd64 (0.18.3.2-2) ... Selecting previously unselected package libmagic1:amd64. Preparing to unpack .../libmagic1_1%3a5.19-1_amd64.deb ... Unpacking libmagic1:amd64 (1:5.19-1) ... Selecting previously unselected package libxml2:amd64. Preparing to unpack .../libxml2_2.9.1+dfsg1-3_amd64.deb ... Unpacking libxml2:amd64 (2.9.1+dfsg1-3) ... Selecting previously unselected package libglib2.0-0:amd64. Preparing to unpack .../libglib2.0-0_2.40.0-3_amd64.deb ... Unpacking libglib2.0-0:amd64 (2.40.0-3) ... Selecting previously unselected package libcroco3:amd64. Preparing to unpack .../libcroco3_0.6.8-2_amd64.deb ... Unpacking libcroco3:amd64 (0.6.8-2) ... Selecting previously unselected package libunistring0:amd64. Preparing to unpack .../libunistring0_0.9.3-5_amd64.deb ... Unpacking libunistring0:amd64 (0.9.3-5) ... Selecting previously unselected package file. Preparing to unpack .../file_1%3a5.19-1_amd64.deb ... Unpacking file (1:5.19-1) ... Selecting previously unselected package gettext-base. Preparing to unpack .../gettext-base_0.18.3.2-2_amd64.deb ... Unpacking gettext-base (0.18.3.2-2) ... Selecting previously unselected package gettext. Preparing to unpack .../gettext_0.18.3.2-2_amd64.deb ... Unpacking gettext (0.18.3.2-2) ... Selecting previously unselected package intltool-debian. Preparing to unpack .../intltool-debian_0.35.0+20060710.1_all.deb ... Unpacking intltool-debian (0.35.0+20060710.1) ... Selecting previously unselected package po-debconf. Preparing to unpack .../po-debconf_1.0.16+nmu2_all.deb ... Unpacking po-debconf (1.0.16+nmu2) ... Selecting previously unselected package debhelper. Preparing to unpack .../debhelper_9.20140613_all.deb ... Unpacking debhelper (9.20140613) ... Selecting previously unselected package sbuild-build-depends-hardening-wrapper-dummy. Preparing to unpack .../sbuild-build-depends-hardening-wrapper-dummy.deb ... Unpacking sbuild-build-depends-hardening-wrapper-dummy (0.invalid.0) ... Setting up libpipeline1:amd64 (1.3.0-1) ... Setting up groff-base (1.22.2-5) ... Setting up bsdmainutils (9.0.5) ... update-alternatives: using /usr/bin/bsd-write to provide /usr/bin/write (write) in auto mode update-alternatives: using /usr/bin/bsd-from to provide /usr/bin/from (from) in auto mode Setting up man-db (2.6.7.1-1) ... Not building database; man-db/auto-update is not 'true'. Setting up libasprintf0c2:amd64 (0.18.3.2-2) ... Setting up libmagic1:amd64 (1:5.19-1) ... Setting up libxml2:amd64 (2.9.1+dfsg1-3) ... Setting up libglib2.0-0:amd64 (2.40.0-3) ... No schema files found: doing nothing. Setting up libcroco3:amd64 (0.6.8-2) ... Setting up libunistring0:amd64 (0.9.3-5) ... Setting up file (1:5.19-1) ... Setting up gettext-base (0.18.3.2-2) ... Setting up gettext (0.18.3.2-2) ... Setting up intltool-debian (0.35.0+20060710.1) ... Setting up po-debconf (1.0.16+nmu2) ... Setting up debhelper (9.20140613) ... Setting up sbuild-build-depends-hardening-wrapper-dummy (0.invalid.0) ... Processing triggers for libc-bin (2.19-2) ... ┌──────────────────────────────────────────────────────────────────────────────┐ │ Build environment │ └──────────────────────────────────────────────────────────────────────────────┘ Kernel: Linux 2.6.32-5-xen-amd64 amd64 (x86_64) Toolchain package versions: binutils_2.24.51.20140604-3 dpkg-dev_1.17.10 g++-4.6_4.6.4-7 g++-4.9_4.9.0-6 gcc-4.6_4.6.4-7 gcc-4.7_4.7.4-1 gcc-4.9_4.9.0-6 libc6-dev_2.19-2 libstdc++-4.9-dev_4.9.0-6 libstdc++6_4.9.0-6 libstdc++6-4.6-dev_4.6.4-7 linux-libc-dev_3.14.7-1 Package versions: apt_1.0.4 base-files_7.3 base-passwd_3.5.33 bash_4.3-7 binutils_2.24.51.20140604-3 bsdmainutils_9.0.5 bsdutils_1:2.20.1-5.8 build-essential_11.6 bzip2_1.0.6-5 clang-3.4_1:3.4.2-2 coreutils_8.21-1.2 cpp_4:4.9.0-3 cpp-4.6_4.6.4-7 cpp-4.7_4.7.4-1 cpp-4.9_4.9.0-6 dash_0.5.7-4 debconf_1.5.53 debconf-i18n_1.5.53 debfoster_2.7-1.2 debhelper_9.20140613 debian-archive-keyring_2012.4 debianutils_4.4 diffutils_1:3.3-1 dpkg_1.17.10 dpkg-dev_1.17.10 e2fslibs_1.42.10-1 e2fsprogs_1.42.10-1 fakeroot_1.20-3 file_1:5.19-1 findutils_4.4.2-8 g++_4:4.9.0-3 g++-4.6_4.6.4-7 g++-4.9_4.9.0-6 gcc_4:4.9.0-3 gcc-4.4-base_4.4.7-8 gcc-4.5-base_4.5.4-1 gcc-4.6_4.6.4-7 gcc-4.6-base_4.6.4-7 gcc-4.7_4.7.4-1 gcc-4.7-base_4.7.4-1 gcc-4.8-base_4.8.3-3 gcc-4.9_4.9.0-6 gcc-4.9-base_4.9.0-6 gettext_0.18.3.2-2 gettext-base_0.18.3.2-2 gnupg_1.4.16-1.1 gpgv_1.4.16-1.1 grep_2.18-2 groff-base_1.22.2-5 gzip_1.6-3 hostname_3.15 initscripts_2.88dsf-53.2 insserv_1.14.0-5 intltool-debian_0.35.0+20060710.1 libacl1_2.2.52-1 libapt-pkg4.12_1.0.4 libarchive-extract-perl_0.72-1 libasan1_4.9.0-6 libasprintf0c2_0.18.3.2-2 libatomic1_4.9.0-6 libattr1_1:2.4.47-1 libaudit-common_1:2.3.7-1 libaudit1_1:2.3.7-1 libblkid1_2.20.1-5.8 libbz2-1.0_1.0.6-5 libc-bin_2.19-2 libc-dev-bin_2.19-2 libc6_2.19-2 libc6-dev_2.19-2 libcap2_1:2.22-1.2 libcilkrts5_4.9.0-6 libclang-common-3.4-dev_1:3.4.2-2 libclang1-3.4_1:3.4.2-2 libclass-isa-perl_0.36-5 libcloog-isl4_0.18.2-1 libcloog-ppl1_0.16.1-5 libcomerr2_1.42.10-1 libcroco3_0.6.8-2 libdb5.1_5.1.29-5 libdb5.3_5.3.28-3 libdebconfclient0_0.191 libdpkg-perl_1.17.10 libfakeroot_1.20-3 libffi6_3.1-2 libfile-fcntllock-perl_0.20-1 libgc1c2_1:7.2d-6 libgcc-4.7-dev_4.7.4-1 libgcc-4.9-dev_4.9.0-6 libgcc1_1:4.9.0-6 libgdbm3_1.8.3-12 libglib2.0-0_2.40.0-3 libgmp10_2:6.0.0+dfsg-4 libgmpxx4ldbl_2:6.0.0+dfsg-4 libgomp1_4.9.0-6 libgpm2_1.20.4-6.1 libisl10_0.12.2-1 libitm1_4.9.0-6 libllvm3.4_1:3.4.2-2 liblocale-gettext-perl_1.05-8 liblog-message-simple-perl_0.10-1 liblsan0_4.9.0-6 liblzma5_5.1.1alpha+20120614-2 libmagic1_1:5.19-1 libmodule-pluggable-perl_5.1-1 libmount1_2.20.1-5.8 libmpc2_0.9-4 libmpc3_1.0.1-1 libmpfr4_3.1.2-1 libncurses5_5.9+20140118-1 libobjc-4.9-dev_4.9.0-6 libobjc4_4.9.0-6 libpam-modules_1.1.8-3 libpam-modules-bin_1.1.8-3 libpam-runtime_1.1.8-3 libpam0g_1.1.8-3 libpcre3_1:8.31-5 libpipeline1_1.3.0-1 libpod-latex-perl_0.61-1 libppl-c4_1:1.1-2+b1 libppl13_1:1.1-2+b1 libquadmath0_4.9.0-6 libreadline6_6.3-6 libselinux1_2.3-1 libsemanage-common_2.3-1 libsemanage1_2.3-1 libsepol1_2.3-1 libslang2_2.2.4-16 libss2_1.42.10-1 libstdc++-4.9-dev_4.9.0-6 libstdc++6_4.9.0-6 libstdc++6-4.6-dev_4.6.4-7 libswitch-perl_2.17-1 libterm-ui-perl_0.42-1 libtext-charwidth-perl_0.04-7+b2 libtext-iconv-perl_1.7-5+b1 libtext-soundex-perl_3.4-1+b1 libtext-wrapi18n-perl_0.06-7 libtimedate-perl_2.3000-2 libtinfo5_5.9+20140118-1 libtsan0_4.9.0-6 libubsan0_4.9.0-6 libunistring0_0.9.3-5 libusb-0.1-4_2:0.1.12-23.3 libustr-1.0-1_1.0.4-3 libuuid1_2.20.1-5.8 libvtv0_4.9.0-6 libxml2_2.9.1+dfsg1-3 linux-libc-dev_3.14.7-1 login_1:4.2-2 lsb-base_4.1+Debian13 make_4.0-8 man-db_2.6.7.1-1 mawk_1.3.3-17 mount_2.20.1-5.8 multiarch-support_2.19-2 ncurses-base_5.9+20140118-1 ncurses-bin_5.9+20140118-1 passwd_1:4.2-2 patch_2.7.1-5 perl_5.18.2-4 perl-base_5.18.2-4 perl-modules_5.18.2-4 po-debconf_1.0.16+nmu2 readline-common_6.3-6 rename_0.20-3 sbuild-build-depends-core-dummy_0.invalid.0 sbuild-build-depends-hardening-wrapper-dummy_0.invalid.0 sed_4.2.2-4 sensible-utils_0.0.9 startpar_0.59-3 sudo_1.8.9p5-1 sysv-rc_2.88dsf-53.2 sysvinit_2.88dsf-53.2 sysvinit-core_2.88dsf-53.2 sysvinit-utils_2.88dsf-53.2 tar_1.27.1-2 tzdata_2014e-1 ucf_3.0030 util-linux_2.20.1-5.8 vim_2:7.4.273-2+b1 vim-common_2:7.4.273-2+b1 vim-runtime_2:7.4.273-2 xz-utils_5.1.1alpha+20120614-2 zlib1g_1:1.2.8.dfsg-1 ┌──────────────────────────────────────────────────────────────────────────────┐ │ Build │ └──────────────────────────────────────────────────────────────────────────────┘ Unpack source ───────────── gpgv: keyblock resource `/sbuild-nonexistent/.gnupg/trustedkeys.gpg': file open error gpgv: Signature made Tue Dec 17 18:15:51 2013 UTC using RSA key ID DC6DC026 gpgv: Can't check signature: public key not found dpkg-source: warning: failed to verify signature on ./hardening-wrapper_2.5.dsc dpkg-source: info: extracting hardening-wrapper in hardening-wrapper-2.5clang1 dpkg-source: info: unpacking hardening-wrapper_2.5.tar.gz Check disc space ──────────────── Sufficient free space for build Hack binNMU version ─────────────────── Created changelog entry for binNMU version 2.5clang1 User Environment ──────────────── DEB_BUILD_OPTIONS=parallel=10 HOME=/sbuild-nonexistent LOGNAME=user PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games SCHROOT_ALIAS_NAME=unstable-amd64-sbuild SCHROOT_CHROOT_NAME=unstable-amd64-sbuild SCHROOT_COMMAND=env SCHROOT_GID=1000 SCHROOT_GROUP=user SCHROOT_SESSION_ID=unstable-amd64-sbuild-f1dc1019-9e8c-4716-a5e4-3ff56d49eab6 SCHROOT_UID=1000 SCHROOT_USER=user SHELL=/bin/sh USER=user dpkg-buildpackage ───────────────── dpkg-buildpackage: source package hardening-wrapper dpkg-buildpackage: source version 2.5clang1 dpkg-buildpackage: source distribution unstable dpkg-source --before-build hardening-wrapper-2.5clang1 dpkg-buildpackage: host architecture amd64 fakeroot debian/rules clean dh clean dh_testdir dh_auto_clean make[1]: Entering directory '/«PKGBUILDDIR»' rm -rf build-tree make[1]: Leaving directory '/«PKGBUILDDIR»' dh_clean debian/rules build-arch dh build-arch dh_testdir -a dh_auto_configure -a dh_auto_build -a make[1]: Entering directory '/«PKGBUILDDIR»' if [ -z "amd64" ]; then echo No DEB_HOST_ARCH; exit 1; fi if [ -z "linux" ]; then echo No DEB_HOST_ARCH_OS; exit 1; fi mkdir -p build-tree # Construct wrappers. install hardened-cc hardened-ld build-tree/ # Set defaults, based on OS and ARCH. perl -pi -e 's/ #OS#/ '"linux"'/; s/ #ARCH#/ '"amd64"'/;' build-tree/hardened-cc build-tree/hardened-ld perl -pi -e "s/default{'DEB_BUILD_HARDENING_PIE'}=1;/default{'DEB_BUILD_HARDENING_PIE'}=1;/;" build-tree/hardened-cc build-tree/hardened-ld perl -pi -e "s/default{'DEB_BUILD_HARDENING_STACKPROTECTOR'}=1;/default{'DEB_BUILD_HARDENING_STACKPROTECTOR'}=1;/;" build-tree/hardened-cc build-tree/hardened-ld # Duplicate cc wrapper to c++. install build-tree/hardened-cc build-tree/hardened-c++ perl -pi -e 's/hardened-cc/hardened-c++/g; s|/usr/bin/cc|/usr/bin/c++|g;' build-tree/hardened-c++ # Construct tools. install hardening.make hardening-check build-tree/ # Do not use "shell" here because it eats newlines. We want those. perl -pi -e "s/^my %libc;/my %libc = (\n$(perl hardening-check --find-libc-functions /bin/ls)\n);/;" build-tree/hardening-check # Construct man pages. install hardened-cc.1 hardened-ld.1 build-tree/ pod2man hardening-check > build-tree/hardening-check.1 # Duplicate cc man page to c++. install build-tree/hardened-cc.1 build-tree/hardened-c++.1 perl -pi -e 's/hardened-cc/hardened-c++/g; s/gcc/g++/g;' build-tree/hardened-c++.1 touch build-tree/stamp-build make[1]: Leaving directory '/«PKGBUILDDIR»' dh_auto_test -a make[1]: Entering directory '/«PKGBUILDDIR»' make -C tests check make[2]: Entering directory '/«PKGBUILDDIR»/tests' # Check the stack protector and PIE options directly, just to have # a historical record in the build logs. cc -Wall -fstack-protector hello.c -o ../build-tree/cc-test || true ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x4005f0) cc -Wall -fPIE -pie hello.c -o ../build-tree/cc-test || true ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x7f86a112c7f0) ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x7f9e0177d7f0) make -f Makefile.wrapper check make[3]: Entering directory '/«PKGBUILDDIR»/tests' # Test basic perl syntax for script in ../build-tree/hardened-cc ../build-tree/hardened-ld ../build-tree/hardened-c++; do perl -c $script; done ../build-tree/hardened-cc syntax OK ../build-tree/hardened-ld syntax OK ../build-tree/hardened-c++ syntax OK touch syntax.stamp # Compiler and linker options disabled. DEB_BUILD_HARDENING=0 ../build-tree/hardened-cc -B ../build-tree/ -o ../build-tree/wrapper-test-stock hello.c /usr/bin/../lib/llvm-3.4/bin/clang -B ../build-tree/ -o ../build-tree/wrapper-test-stock hello.c readelf -ldrsW ../build-tree/wrapper-test-stock Elf file type is EXEC (Executable file) Entry point 0x400480 There are 8 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000400040 0x0000000000400040 0x0001c0 0x0001c0 R E 0x8 INTERP 0x000200 0x0000000000400200 0x0000000000400200 0x00001c 0x00001c R 0x1 [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2] LOAD 0x000000 0x0000000000400000 0x0000000000400000 0x000814 0x000814 R E 0x200000 LOAD 0x000818 0x0000000000600818 0x0000000000600818 0x000248 0x000250 RW 0x200000 DYNAMIC 0x000830 0x0000000000600830 0x0000000000600830 0x0001e0 0x0001e0 RW 0x8 NOTE 0x00021c 0x000000000040021c 0x000000000040021c 0x000044 0x000044 R 0x4 GNU_EH_FRAME 0x0006c4 0x00000000004006c4 0x00000000004006c4 0x00003c 0x00003c R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RW 0x10 Section to Segment mapping: Segment Sections... 00 01 .interp 02 .interp .note.ABI-tag .note.gnu.build-id .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt .text .fini .rodata .eh_frame_hdr .eh_frame 03 .init_array .fini_array .jcr .dynamic .got .got.plt .data .bss 04 .dynamic 05 .note.ABI-tag .note.gnu.build-id 06 .eh_frame_hdr 07 Dynamic section at offset 0x830 contains 25 entries: Tag Type Name/Value 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] 0x000000000000000c (INIT) 0x400408 0x000000000000000d (FINI) 0x4006a4 0x0000000000000019 (INIT_ARRAY) 0x600818 0x000000000000001b (INIT_ARRAYSZ) 8 (bytes) 0x000000000000001a (FINI_ARRAY) 0x600820 0x000000000000001c (FINI_ARRAYSZ) 8 (bytes) 0x0000000000000004 (HASH) 0x400260 0x000000006ffffef5 (GNU_HASH) 0x400288 0x0000000000000005 (STRTAB) 0x400320 0x0000000000000006 (SYMTAB) 0x4002a8 0x000000000000000a (STRSZ) 65 (bytes) 0x000000000000000b (SYMENT) 24 (bytes) 0x0000000000000015 (DEBUG) 0x0 0x0000000000000003 (PLTGOT) 0x600a18 0x0000000000000002 (PLTRELSZ) 96 (bytes) 0x0000000000000014 (PLTREL) RELA 0x0000000000000017 (JMPREL) 0x4003a8 0x0000000000000007 (RELA) 0x400390 0x0000000000000008 (RELASZ) 24 (bytes) 0x0000000000000009 (RELAENT) 24 (bytes) 0x000000006ffffffe (VERNEED) 0x400370 0x000000006fffffff (VERNEEDNUM) 1 0x000000006ffffff0 (VERSYM) 0x400362 0x0000000000000000 (NULL) 0x0 Relocation section '.rela.dyn' at offset 0x390 contains 1 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000600a10 0000000400000006 R_X86_64_GLOB_DAT 0000000000000000 __gmon_start__ + 0 Relocation section '.rela.plt' at offset 0x3a8 contains 4 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000600a30 0000000100000007 R_X86_64_JUMP_SLOT 0000000000000000 printf + 0 0000000000600a38 0000000200000007 R_X86_64_JUMP_SLOT 0000000000000000 snprintf + 0 0000000000600a40 0000000300000007 R_X86_64_JUMP_SLOT 0000000000000000 __libc_start_main + 0 0000000000600a48 0000000400000007 R_X86_64_JUMP_SLOT 0000000000000000 __gmon_start__ + 0 Symbol table '.dynsym' contains 5 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000000 0 FUNC GLOBAL DEFAULT UND printf@GLIBC_2.2.5 (2) 2: 0000000000000000 0 FUNC GLOBAL DEFAULT UND snprintf@GLIBC_2.2.5 (2) 3: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.2.5 (2) 4: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ Symbol table '.symtab' contains 68 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000400200 0 SECTION LOCAL DEFAULT 1 2: 000000000040021c 0 SECTION LOCAL DEFAULT 2 3: 000000000040023c 0 SECTION LOCAL DEFAULT 3 4: 0000000000400260 0 SECTION LOCAL DEFAULT 4 5: 0000000000400288 0 SECTION LOCAL DEFAULT 5 6: 00000000004002a8 0 SECTION LOCAL DEFAULT 6 7: 0000000000400320 0 SECTION LOCAL DEFAULT 7 8: 0000000000400362 0 SECTION LOCAL DEFAULT 8 9: 0000000000400370 0 SECTION LOCAL DEFAULT 9 10: 0000000000400390 0 SECTION LOCAL DEFAULT 10 11: 00000000004003a8 0 SECTION LOCAL DEFAULT 11 12: 0000000000400408 0 SECTION LOCAL DEFAULT 12 13: 0000000000400430 0 SECTION LOCAL DEFAULT 13 14: 0000000000400480 0 SECTION LOCAL DEFAULT 14 15: 00000000004006a4 0 SECTION LOCAL DEFAULT 15 16: 00000000004006b0 0 SECTION LOCAL DEFAULT 16 17: 00000000004006c4 0 SECTION LOCAL DEFAULT 17 18: 0000000000400700 0 SECTION LOCAL DEFAULT 18 19: 0000000000600818 0 SECTION LOCAL DEFAULT 19 20: 0000000000600820 0 SECTION LOCAL DEFAULT 20 21: 0000000000600828 0 SECTION LOCAL DEFAULT 21 22: 0000000000600830 0 SECTION LOCAL DEFAULT 22 23: 0000000000600a10 0 SECTION LOCAL DEFAULT 23 24: 0000000000600a18 0 SECTION LOCAL DEFAULT 24 25: 0000000000600a50 0 SECTION LOCAL DEFAULT 25 26: 0000000000600a60 0 SECTION LOCAL DEFAULT 26 27: 0000000000000000 0 SECTION LOCAL DEFAULT 27 28: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 29: 0000000000600828 0 OBJECT LOCAL DEFAULT 21 __JCR_LIST__ 30: 00000000004004b0 0 FUNC LOCAL DEFAULT 14 deregister_tm_clones 31: 00000000004004f0 0 FUNC LOCAL DEFAULT 14 register_tm_clones 32: 0000000000400530 0 FUNC LOCAL DEFAULT 14 __do_global_dtors_aux 33: 0000000000600a60 1 OBJECT LOCAL DEFAULT 26 completed.6656 34: 0000000000600820 0 OBJECT LOCAL DEFAULT 20 __do_global_dtors_aux_fini_array_entry 35: 0000000000400550 0 FUNC LOCAL DEFAULT 14 frame_dummy 36: 0000000000600818 0 OBJECT LOCAL DEFAULT 19 __frame_dummy_init_array_entry 37: 0000000000000000 0 FILE LOCAL DEFAULT ABS hello.c 38: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 39: 0000000000400810 0 OBJECT LOCAL DEFAULT 18 __FRAME_END__ 40: 0000000000600828 0 OBJECT LOCAL DEFAULT 21 __JCR_END__ 41: 0000000000000000 0 FILE LOCAL DEFAULT ABS 42: 0000000000600820 0 NOTYPE LOCAL DEFAULT 19 __init_array_end 43: 0000000000600830 0 OBJECT LOCAL DEFAULT 22 _DYNAMIC 44: 0000000000600818 0 NOTYPE LOCAL DEFAULT 19 __init_array_start 45: 0000000000600a18 0 OBJECT LOCAL DEFAULT 24 _GLOBAL_OFFSET_TABLE_ 46: 00000000004006a0 2 FUNC GLOBAL DEFAULT 14 __libc_csu_fini 47: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 48: 0000000000600a50 0 NOTYPE WEAK DEFAULT 25 data_start 49: 0000000000600a60 0 NOTYPE GLOBAL DEFAULT 25 _edata 50: 00000000004006a4 0 FUNC GLOBAL DEFAULT 15 _fini 51: 0000000000000000 0 FUNC GLOBAL DEFAULT UND printf@@GLIBC_2.2.5 52: 0000000000000000 0 FUNC GLOBAL DEFAULT UND snprintf@@GLIBC_2.2.5 53: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@@GLIBC_2.2.5 54: 0000000000600a50 0 NOTYPE GLOBAL DEFAULT 25 __data_start 55: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 56: 0000000000600a58 0 OBJECT GLOBAL HIDDEN 25 __dso_handle 57: 0000000000400580 99 FUNC GLOBAL DEFAULT 14 announcement 58: 00000000004006b0 4 OBJECT GLOBAL DEFAULT 16 _IO_stdin_used 59: 0000000000400630 101 FUNC GLOBAL DEFAULT 14 __libc_csu_init 60: 0000000000600a68 0 NOTYPE GLOBAL DEFAULT 26 _end 61: 0000000000400480 0 FUNC GLOBAL DEFAULT 14 _start 62: 0000000000600a60 0 NOTYPE GLOBAL DEFAULT 26 __bss_start 63: 00000000004005f0 57 FUNC GLOBAL DEFAULT 14 main 64: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 65: 0000000000600a60 0 OBJECT GLOBAL HIDDEN 25 __TMC_END__ 66: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 67: 0000000000400408 0 FUNC GLOBAL DEFAULT 12 _init ../build-tree/wrapper-test-stock ../build-tree/wrapper-test-stock: ok (0x400580) # Compiler options enabled. (linker is not wrapper) ../build-tree/hardened-cc -B ../build-tree/ -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-compiled hello.c /usr/bin/../lib/llvm-3.4/bin/clang -fstack-protector --param=ssp-buffer-size=4 -fPIE -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-compiled hello.c readelf -ldrsW ../build-tree/wrapper-test-compiled Elf file type is DYN (Shared object file) Entry point 0x790 There are 9 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000000040 0x0000000000000040 0x0001f8 0x0001f8 R E 0x8 INTERP 0x000238 0x0000000000000238 0x0000000000000238 0x00001c 0x00001c R 0x1 [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2] LOAD 0x000000 0x0000000000000000 0x0000000000000000 0x000bb4 0x000bb4 R E 0x200000 LOAD 0x000de0 0x0000000000200de0 0x0000000000200de0 0x000278 0x000280 RW 0x200000 DYNAMIC 0x000df8 0x0000000000200df8 0x0000000000200df8 0x0001e0 0x0001e0 RW 0x8 NOTE 0x000254 0x0000000000000254 0x0000000000000254 0x000044 0x000044 R 0x4 GNU_EH_FRAME 0x000a64 0x0000000000000a64 0x0000000000000a64 0x00003c 0x00003c R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RW 0x10 GNU_RELRO 0x000de0 0x0000000000200de0 0x0000000000200de0 0x000220 0x000220 R 0x1 Section to Segment mapping: Segment Sections... 00 01 .interp 02 .interp .note.ABI-tag .note.gnu.build-id .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt .text .fini .rodata .eh_frame_hdr .eh_frame 03 .init_array .fini_array .jcr .dynamic .got .got.plt .data .bss 04 .dynamic 05 .note.ABI-tag .note.gnu.build-id 06 .eh_frame_hdr 07 08 .init_array .fini_array .jcr .dynamic .got Dynamic section at offset 0xdf8 contains 26 entries: Tag Type Name/Value 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] 0x000000000000000c (INIT) 0x700 0x000000000000000d (FINI) 0xa44 0x0000000000000019 (INIT_ARRAY) 0x200de0 0x000000000000001b (INIT_ARRAYSZ) 8 (bytes) 0x000000000000001a (FINI_ARRAY) 0x200de8 0x000000000000001c (FINI_ARRAYSZ) 8 (bytes) 0x0000000000000004 (HASH) 0x298 0x000000006ffffef5 (GNU_HASH) 0x2e8 0x0000000000000005 (STRTAB) 0x468 0x0000000000000006 (SYMTAB) 0x318 0x000000000000000a (STRSZ) 236 (bytes) 0x000000000000000b (SYMENT) 24 (bytes) 0x0000000000000015 (DEBUG) 0x0 0x0000000000000003 (PLTGOT) 0x201000 0x0000000000000002 (PLTRELSZ) 144 (bytes) 0x0000000000000014 (PLTREL) RELA 0x0000000000000017 (JMPREL) 0x670 0x0000000000000007 (RELA) 0x5b0 0x0000000000000008 (RELASZ) 192 (bytes) 0x0000000000000009 (RELAENT) 24 (bytes) 0x000000006ffffffe (VERNEED) 0x570 0x000000006fffffff (VERNEEDNUM) 1 0x000000006ffffff0 (VERSYM) 0x554 0x000000006ffffff9 (RELACOUNT) 3 0x0000000000000000 (NULL) 0x0 Relocation section '.rela.dyn' at offset 0x5b0 contains 8 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000200de0 0000000000000008 R_X86_64_RELATIVE 890 0000000000200de8 0000000000000008 R_X86_64_RELATIVE 850 0000000000201050 0000000000000008 R_X86_64_RELATIVE 201050 0000000000200fd8 0000000300000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_deregisterTMCloneTable + 0 0000000000200fe0 0000000600000006 R_X86_64_GLOB_DAT 0000000000000000 __gmon_start__ + 0 0000000000200fe8 0000000800000006 R_X86_64_GLOB_DAT 0000000000000000 _Jv_RegisterClasses + 0 0000000000200ff0 0000000900000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_registerTMCloneTable + 0 0000000000200ff8 0000000a00000006 R_X86_64_GLOB_DAT 0000000000000000 __cxa_finalize + 0 Relocation section '.rela.plt' at offset 0x670 contains 6 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000201018 0000000200000007 R_X86_64_JUMP_SLOT 0000000000000000 __snprintf_chk + 0 0000000000201020 0000000400000007 R_X86_64_JUMP_SLOT 0000000000000000 __stack_chk_fail + 0 0000000000201028 0000000500000007 R_X86_64_JUMP_SLOT 0000000000000000 __libc_start_main + 0 0000000000201030 0000000600000007 R_X86_64_JUMP_SLOT 0000000000000000 __gmon_start__ + 0 0000000000201038 0000000700000007 R_X86_64_JUMP_SLOT 0000000000000000 __printf_chk + 0 0000000000201040 0000000a00000007 R_X86_64_JUMP_SLOT 0000000000000000 __cxa_finalize + 0 Symbol table '.dynsym' contains 14 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000238 0 SECTION LOCAL DEFAULT 1 2: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@GLIBC_2.3.4 (2) 3: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 4: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@GLIBC_2.4 (3) 5: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.2.5 (4) 6: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 7: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@GLIBC_2.3.4 (2) 8: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 9: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 10: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@GLIBC_2.2.5 (4) 11: 0000000000201058 0 NOTYPE GLOBAL DEFAULT 25 _edata 12: 0000000000201060 0 NOTYPE GLOBAL DEFAULT 26 _end 13: 0000000000201058 0 NOTYPE GLOBAL DEFAULT 26 __bss_start Symbol table '.symtab' contains 78 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000238 0 SECTION LOCAL DEFAULT 1 2: 0000000000000254 0 SECTION LOCAL DEFAULT 2 3: 0000000000000274 0 SECTION LOCAL DEFAULT 3 4: 0000000000000298 0 SECTION LOCAL DEFAULT 4 5: 00000000000002e8 0 SECTION LOCAL DEFAULT 5 6: 0000000000000318 0 SECTION LOCAL DEFAULT 6 7: 0000000000000468 0 SECTION LOCAL DEFAULT 7 8: 0000000000000554 0 SECTION LOCAL DEFAULT 8 9: 0000000000000570 0 SECTION LOCAL DEFAULT 9 10: 00000000000005b0 0 SECTION LOCAL DEFAULT 10 11: 0000000000000670 0 SECTION LOCAL DEFAULT 11 12: 0000000000000700 0 SECTION LOCAL DEFAULT 12 13: 0000000000000720 0 SECTION LOCAL DEFAULT 13 14: 0000000000000790 0 SECTION LOCAL DEFAULT 14 15: 0000000000000a44 0 SECTION LOCAL DEFAULT 15 16: 0000000000000a50 0 SECTION LOCAL DEFAULT 16 17: 0000000000000a64 0 SECTION LOCAL DEFAULT 17 18: 0000000000000aa0 0 SECTION LOCAL DEFAULT 18 19: 0000000000200de0 0 SECTION LOCAL DEFAULT 19 20: 0000000000200de8 0 SECTION LOCAL DEFAULT 20 21: 0000000000200df0 0 SECTION LOCAL DEFAULT 21 22: 0000000000200df8 0 SECTION LOCAL DEFAULT 22 23: 0000000000200fd8 0 SECTION LOCAL DEFAULT 23 24: 0000000000201000 0 SECTION LOCAL DEFAULT 24 25: 0000000000201048 0 SECTION LOCAL DEFAULT 25 26: 0000000000201058 0 SECTION LOCAL DEFAULT 26 27: 0000000000000000 0 SECTION LOCAL DEFAULT 27 28: 0000000000000000 0 SECTION LOCAL DEFAULT 28 29: 0000000000000000 0 SECTION LOCAL DEFAULT 29 30: 0000000000000000 0 SECTION LOCAL DEFAULT 30 31: 0000000000000000 0 SECTION LOCAL DEFAULT 31 32: 0000000000000000 0 SECTION LOCAL DEFAULT 32 33: 0000000000000000 0 SECTION LOCAL DEFAULT 33 34: 0000000000000000 0 SECTION LOCAL DEFAULT 34 35: 0000000000000000 0 SECTION LOCAL DEFAULT 35 36: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 37: 0000000000200df0 0 OBJECT LOCAL DEFAULT 21 __JCR_LIST__ 38: 00000000000007c0 0 FUNC LOCAL DEFAULT 14 deregister_tm_clones 39: 0000000000000800 0 FUNC LOCAL DEFAULT 14 register_tm_clones 40: 0000000000000850 0 FUNC LOCAL DEFAULT 14 __do_global_dtors_aux 41: 0000000000201058 1 OBJECT LOCAL DEFAULT 26 completed.6656 42: 0000000000200de8 0 OBJECT LOCAL DEFAULT 20 __do_global_dtors_aux_fini_array_entry 43: 0000000000000890 0 FUNC LOCAL DEFAULT 14 frame_dummy 44: 0000000000200de0 0 OBJECT LOCAL DEFAULT 19 __frame_dummy_init_array_entry 45: 0000000000000000 0 FILE LOCAL DEFAULT ABS hello.c 46: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 47: 0000000000000bb0 0 OBJECT LOCAL DEFAULT 18 __FRAME_END__ 48: 0000000000200df0 0 OBJECT LOCAL DEFAULT 21 __JCR_END__ 49: 0000000000000000 0 FILE LOCAL DEFAULT ABS 50: 0000000000200de8 0 NOTYPE LOCAL DEFAULT 19 __init_array_end 51: 0000000000200df8 0 OBJECT LOCAL DEFAULT 22 _DYNAMIC 52: 0000000000200de0 0 NOTYPE LOCAL DEFAULT 19 __init_array_start 53: 0000000000201000 0 OBJECT LOCAL DEFAULT 24 _GLOBAL_OFFSET_TABLE_ 54: 0000000000000a40 2 FUNC GLOBAL DEFAULT 14 __libc_csu_fini 55: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@@GLIBC_2.3.4 56: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 57: 0000000000201048 0 NOTYPE WEAK DEFAULT 25 data_start 58: 0000000000201058 0 NOTYPE GLOBAL DEFAULT 25 _edata 59: 0000000000000a44 0 FUNC GLOBAL DEFAULT 15 _fini 60: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@@GLIBC_2.4 61: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@@GLIBC_2.2.5 62: 0000000000201048 0 NOTYPE GLOBAL DEFAULT 25 __data_start 63: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 64: 0000000000201050 0 OBJECT GLOBAL HIDDEN 25 __dso_handle 65: 00000000000008c0 126 FUNC GLOBAL DEFAULT 14 announcement 66: 0000000000000a50 4 OBJECT GLOBAL DEFAULT 16 _IO_stdin_used 67: 00000000000009d0 101 FUNC GLOBAL DEFAULT 14 __libc_csu_init 68: 0000000000201060 0 NOTYPE GLOBAL DEFAULT 26 _end 69: 0000000000000790 0 FUNC GLOBAL DEFAULT 14 _start 70: 0000000000201058 0 NOTYPE GLOBAL DEFAULT 26 __bss_start 71: 0000000000000940 134 FUNC GLOBAL DEFAULT 14 main 72: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@@GLIBC_2.3.4 73: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 74: 0000000000201058 0 OBJECT GLOBAL HIDDEN 25 __TMC_END__ 75: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 76: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@@GLIBC_2.2.5 77: 0000000000000700 0 FUNC GLOBAL DEFAULT 12 _init # Run twice to show off PIE, if available in kernel ../build-tree/wrapper-test-compiled ../build-tree/wrapper-test-compiled: ok (0x7f925cf058c0) ../build-tree/wrapper-test-compiled ../build-tree/wrapper-test-compiled: ok (0x7fae130648c0) # Enable symlink for ld to trick gcc into doing wrapped linking (cd ../build-tree && ln -s hardened-ld ld) (cd ../build-tree && ln -s hardened-ld ld.gold) # Compiler and linker options enabled. ../build-tree/hardened-cc -B ../build-tree/ -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-linked hello.c /usr/bin/../lib/llvm-3.4/bin/clang -fstack-protector --param=ssp-buffer-size=4 -fPIE -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-linked hello.c /usr/bin/ld.bfd -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-linked /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/4.9/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/4.9 -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../.. -L/lib -L/usr/lib -z relro /tmp/hello-ba6347.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/4.9/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crtn.o readelf -ldrsW ../build-tree/wrapper-test-linked Elf file type is DYN (Shared object file) Entry point 0x790 There are 9 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000000040 0x0000000000000040 0x0001f8 0x0001f8 R E 0x8 INTERP 0x000238 0x0000000000000238 0x0000000000000238 0x00001c 0x00001c R 0x1 [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2] LOAD 0x000000 0x0000000000000000 0x0000000000000000 0x000bb4 0x000bb4 R E 0x200000 LOAD 0x000d78 0x0000000000200d78 0x0000000000200d78 0x000298 0x0002a0 RW 0x200000 DYNAMIC 0x000d90 0x0000000000200d90 0x0000000000200d90 0x000200 0x000200 RW 0x8 NOTE 0x000254 0x0000000000000254 0x0000000000000254 0x000044 0x000044 R 0x4 GNU_EH_FRAME 0x000a64 0x0000000000000a64 0x0000000000000a64 0x00003c 0x00003c R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RW 0x10 GNU_RELRO 0x000d78 0x0000000000200d78 0x0000000000200d78 0x000288 0x000288 R 0x1 Section to Segment mapping: Segment Sections... 00 01 .interp 02 .interp .note.ABI-tag .note.gnu.build-id .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt .text .fini .rodata .eh_frame_hdr .eh_frame 03 .init_array .fini_array .jcr .dynamic .got .data .bss 04 .dynamic 05 .note.ABI-tag .note.gnu.build-id 06 .eh_frame_hdr 07 08 .init_array .fini_array .jcr .dynamic .got Dynamic section at offset 0xd90 contains 28 entries: Tag Type Name/Value 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] 0x000000000000000c (INIT) 0x700 0x000000000000000d (FINI) 0xa44 0x0000000000000019 (INIT_ARRAY) 0x200d78 0x000000000000001b (INIT_ARRAYSZ) 8 (bytes) 0x000000000000001a (FINI_ARRAY) 0x200d80 0x000000000000001c (FINI_ARRAYSZ) 8 (bytes) 0x0000000000000004 (HASH) 0x298 0x000000006ffffef5 (GNU_HASH) 0x2e8 0x0000000000000005 (STRTAB) 0x468 0x0000000000000006 (SYMTAB) 0x318 0x000000000000000a (STRSZ) 236 (bytes) 0x000000000000000b (SYMENT) 24 (bytes) 0x0000000000000015 (DEBUG) 0x0 0x0000000000000003 (PLTGOT) 0x200f90 0x0000000000000002 (PLTRELSZ) 144 (bytes) 0x0000000000000014 (PLTREL) RELA 0x0000000000000017 (JMPREL) 0x670 0x0000000000000007 (RELA) 0x5b0 0x0000000000000008 (RELASZ) 192 (bytes) 0x0000000000000009 (RELAENT) 24 (bytes) 0x0000000000000018 (BIND_NOW) 0x000000006ffffffb (FLAGS_1) Flags: NOW 0x000000006ffffffe (VERNEED) 0x570 0x000000006fffffff (VERNEEDNUM) 1 0x000000006ffffff0 (VERSYM) 0x554 0x000000006ffffff9 (RELACOUNT) 3 0x0000000000000000 (NULL) 0x0 Relocation section '.rela.dyn' at offset 0x5b0 contains 8 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000200d78 0000000000000008 R_X86_64_RELATIVE 890 0000000000200d80 0000000000000008 R_X86_64_RELATIVE 850 0000000000201008 0000000000000008 R_X86_64_RELATIVE 201008 0000000000200fd8 0000000300000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_deregisterTMCloneTable + 0 0000000000200fe0 0000000600000006 R_X86_64_GLOB_DAT 0000000000000000 __gmon_start__ + 0 0000000000200fe8 0000000800000006 R_X86_64_GLOB_DAT 0000000000000000 _Jv_RegisterClasses + 0 0000000000200ff0 0000000900000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_registerTMCloneTable + 0 0000000000200ff8 0000000a00000006 R_X86_64_GLOB_DAT 0000000000000000 __cxa_finalize + 0 Relocation section '.rela.plt' at offset 0x670 contains 6 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000200fa8 0000000200000007 R_X86_64_JUMP_SLOT 0000000000000000 __snprintf_chk + 0 0000000000200fb0 0000000400000007 R_X86_64_JUMP_SLOT 0000000000000000 __stack_chk_fail + 0 0000000000200fb8 0000000500000007 R_X86_64_JUMP_SLOT 0000000000000000 __libc_start_main + 0 0000000000200fc0 0000000600000007 R_X86_64_JUMP_SLOT 0000000000000000 __gmon_start__ + 0 0000000000200fc8 0000000700000007 R_X86_64_JUMP_SLOT 0000000000000000 __printf_chk + 0 0000000000200fd0 0000000a00000007 R_X86_64_JUMP_SLOT 0000000000000000 __cxa_finalize + 0 Symbol table '.dynsym' contains 14 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000238 0 SECTION LOCAL DEFAULT 1 2: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@GLIBC_2.3.4 (2) 3: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 4: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@GLIBC_2.4 (3) 5: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.2.5 (4) 6: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 7: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@GLIBC_2.3.4 (2) 8: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 9: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 10: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@GLIBC_2.2.5 (4) 11: 0000000000201010 0 NOTYPE GLOBAL DEFAULT 24 _edata 12: 0000000000201018 0 NOTYPE GLOBAL DEFAULT 25 _end 13: 0000000000201010 0 NOTYPE GLOBAL DEFAULT 25 __bss_start Symbol table '.symtab' contains 77 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000238 0 SECTION LOCAL DEFAULT 1 2: 0000000000000254 0 SECTION LOCAL DEFAULT 2 3: 0000000000000274 0 SECTION LOCAL DEFAULT 3 4: 0000000000000298 0 SECTION LOCAL DEFAULT 4 5: 00000000000002e8 0 SECTION LOCAL DEFAULT 5 6: 0000000000000318 0 SECTION LOCAL DEFAULT 6 7: 0000000000000468 0 SECTION LOCAL DEFAULT 7 8: 0000000000000554 0 SECTION LOCAL DEFAULT 8 9: 0000000000000570 0 SECTION LOCAL DEFAULT 9 10: 00000000000005b0 0 SECTION LOCAL DEFAULT 10 11: 0000000000000670 0 SECTION LOCAL DEFAULT 11 12: 0000000000000700 0 SECTION LOCAL DEFAULT 12 13: 0000000000000720 0 SECTION LOCAL DEFAULT 13 14: 0000000000000790 0 SECTION LOCAL DEFAULT 14 15: 0000000000000a44 0 SECTION LOCAL DEFAULT 15 16: 0000000000000a50 0 SECTION LOCAL DEFAULT 16 17: 0000000000000a64 0 SECTION LOCAL DEFAULT 17 18: 0000000000000aa0 0 SECTION LOCAL DEFAULT 18 19: 0000000000200d78 0 SECTION LOCAL DEFAULT 19 20: 0000000000200d80 0 SECTION LOCAL DEFAULT 20 21: 0000000000200d88 0 SECTION LOCAL DEFAULT 21 22: 0000000000200d90 0 SECTION LOCAL DEFAULT 22 23: 0000000000200f90 0 SECTION LOCAL DEFAULT 23 24: 0000000000201000 0 SECTION LOCAL DEFAULT 24 25: 0000000000201010 0 SECTION LOCAL DEFAULT 25 26: 0000000000000000 0 SECTION LOCAL DEFAULT 26 27: 0000000000000000 0 SECTION LOCAL DEFAULT 27 28: 0000000000000000 0 SECTION LOCAL DEFAULT 28 29: 0000000000000000 0 SECTION LOCAL DEFAULT 29 30: 0000000000000000 0 SECTION LOCAL DEFAULT 30 31: 0000000000000000 0 SECTION LOCAL DEFAULT 31 32: 0000000000000000 0 SECTION LOCAL DEFAULT 32 33: 0000000000000000 0 SECTION LOCAL DEFAULT 33 34: 0000000000000000 0 SECTION LOCAL DEFAULT 34 35: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 36: 0000000000200d88 0 OBJECT LOCAL DEFAULT 21 __JCR_LIST__ 37: 00000000000007c0 0 FUNC LOCAL DEFAULT 14 deregister_tm_clones 38: 0000000000000800 0 FUNC LOCAL DEFAULT 14 register_tm_clones 39: 0000000000000850 0 FUNC LOCAL DEFAULT 14 __do_global_dtors_aux 40: 0000000000201010 1 OBJECT LOCAL DEFAULT 25 completed.6656 41: 0000000000200d80 0 OBJECT LOCAL DEFAULT 20 __do_global_dtors_aux_fini_array_entry 42: 0000000000000890 0 FUNC LOCAL DEFAULT 14 frame_dummy 43: 0000000000200d78 0 OBJECT LOCAL DEFAULT 19 __frame_dummy_init_array_entry 44: 0000000000000000 0 FILE LOCAL DEFAULT ABS hello.c 45: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 46: 0000000000000bb0 0 OBJECT LOCAL DEFAULT 18 __FRAME_END__ 47: 0000000000200d88 0 OBJECT LOCAL DEFAULT 21 __JCR_END__ 48: 0000000000000000 0 FILE LOCAL DEFAULT ABS 49: 0000000000200d80 0 NOTYPE LOCAL DEFAULT 19 __init_array_end 50: 0000000000200d90 0 OBJECT LOCAL DEFAULT 22 _DYNAMIC 51: 0000000000200d78 0 NOTYPE LOCAL DEFAULT 19 __init_array_start 52: 0000000000200f90 0 OBJECT LOCAL DEFAULT 23 _GLOBAL_OFFSET_TABLE_ 53: 0000000000000a40 2 FUNC GLOBAL DEFAULT 14 __libc_csu_fini 54: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@@GLIBC_2.3.4 55: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 56: 0000000000201000 0 NOTYPE WEAK DEFAULT 24 data_start 57: 0000000000201010 0 NOTYPE GLOBAL DEFAULT 24 _edata 58: 0000000000000a44 0 FUNC GLOBAL DEFAULT 15 _fini 59: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@@GLIBC_2.4 60: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@@GLIBC_2.2.5 61: 0000000000201000 0 NOTYPE GLOBAL DEFAULT 24 __data_start 62: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 63: 0000000000201008 0 OBJECT GLOBAL HIDDEN 24 __dso_handle 64: 00000000000008c0 126 FUNC GLOBAL DEFAULT 14 announcement 65: 0000000000000a50 4 OBJECT GLOBAL DEFAULT 16 _IO_stdin_used 66: 00000000000009d0 101 FUNC GLOBAL DEFAULT 14 __libc_csu_init 67: 0000000000201018 0 NOTYPE GLOBAL DEFAULT 25 _end 68: 0000000000000790 0 FUNC GLOBAL DEFAULT 14 _start 69: 0000000000201010 0 NOTYPE GLOBAL DEFAULT 25 __bss_start 70: 0000000000000940 134 FUNC GLOBAL DEFAULT 14 main 71: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@@GLIBC_2.3.4 72: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 73: 0000000000201010 0 OBJECT GLOBAL HIDDEN 24 __TMC_END__ 74: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 75: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@@GLIBC_2.2.5 76: 0000000000000700 0 FUNC GLOBAL DEFAULT 12 _init # Run twice to show off PIE, if available in kernel ../build-tree/wrapper-test-linked ../build-tree/wrapper-test-linked: ok (0x7fd93b2f28c0) ../build-tree/wrapper-test-linked ../build-tree/wrapper-test-linked: ok (0x7fefa11c48c0) # Check state of hardening features via check script perl ../build-tree/hardening-check ../build-tree/wrapper-test-linked ../build-tree/wrapper-test-linked: Position Independent Executable: yes Stack protected: yes Fortify Source functions: yes Read-only relocations: yes Immediate binding: yes # Manually check state of hardening features # Test PIE readelf -lW ../build-tree/wrapper-test-linked | grep '^Elf file type is DYN' Elf file type is DYN (Shared object file) # Test Stack Protector nm ../build-tree/wrapper-test-linked | egrep '__stack_chk_fail($|@@GLIBC)' U __stack_chk_fail@@GLIBC_2.4 # Test Fortify nm ../build-tree/wrapper-test-linked | egrep '__(sn)?printf_chk($|@@GLIBC)' U __printf_chk@@GLIBC_2.3.4 U __snprintf_chk@@GLIBC_2.3.4 # Test Format (no-op currently) # Test for RELRO readelf -lW ../build-tree/wrapper-test-linked | grep GNU_RELRO GNU_RELRO 0x000d78 0x0000000000200d78 0x0000000000200d78 0x000288 0x000288 R 0x1 # Test for BIND_NOW readelf -dW ../build-tree/wrapper-test-linked | grep BIND_NOW 0x0000000000000018 (BIND_NOW) # Build directly with -fPIC already defined ../build-tree/hardened-cc -B ../build-tree/ -fPIC -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-fPIC-direct hello.c /usr/bin/../lib/llvm-3.4/bin/clang -fstack-protector --param=ssp-buffer-size=4 -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -fPIC -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-fPIC-direct hello.c /usr/bin/ld.bfd -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-fPIC-direct /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/4.9/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/4.9 -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../.. -L/lib -L/usr/lib -z relro /tmp/hello-7668e7.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/4.9/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crtn.o ../build-tree/wrapper-test-fPIC-direct ../build-tree/wrapper-test-fPIC-direct: ok (0x7fd127f4d8c0) # Build .o with -fPIC already defined ../build-tree/hardened-cc -B ../build-tree/ -fPIC -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-fPIC.o -c hello.c /usr/bin/../lib/llvm-3.4/bin/clang -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -fPIC -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-fPIC.o -c hello.c clang: warning: -Wl,-z,relro: 'linker' input unused # Link .o with -fPIC already defined ../build-tree/hardened-cc -B ../build-tree/ -fPIC -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-fPIC ../build-tree/wrapper-test-fPIC.o /usr/bin/../lib/llvm-3.4/bin/clang -fstack-protector --param=ssp-buffer-size=4 -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -fPIC -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-fPIC ../build-tree/wrapper-test-fPIC.o /usr/bin/ld.bfd -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-fPIC /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/4.9/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/4.9 -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../.. -L/lib -L/usr/lib -z relro ../build-tree/wrapper-test-fPIC.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/4.9/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crtn.o ../build-tree/wrapper-test-fPIC ../build-tree/wrapper-test-fPIC: ok (0x7f722da4c8c0) # Make sure build fails due to -Werror=format-security ! ../build-tree/hardened-cc -B ../build-tree/ -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-format-security format.c /usr/bin/../lib/llvm-3.4/bin/clang -fstack-protector --param=ssp-buffer-size=4 -fPIE -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -O2 -Wl,-z,relro -o ../build-tree/wrapper-test-format-security format.c /usr/bin/ld.bfd -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-format-security /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/4.9/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/4.9 -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/4.9/../../.. -L/lib -L/usr/lib -z relro /tmp/format-a61dd3.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/4.9/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/4.9/../../../x86_64-linux-gnu/crtn.o make[3]: *** [../build-tree/wrapper-test-format-security] Error 1 Makefile.common:140: recipe for target '../build-tree/wrapper-test-format-security' failed make[3]: Leaving directory '/«PKGBUILDDIR»/tests' make[2]: *** [check] Error 2 make[1]: *** [check] Error 2 Makefile:6: recipe for target 'check' failed make[2]: Leaving directory '/«PKGBUILDDIR»/tests' Makefile:43: recipe for target 'check' failed make[1]: Leaving directory '/«PKGBUILDDIR»' dh_auto_test: make -j1 check returned exit code 2 make: *** [build-arch] Error 2 debian/rules:3: recipe for target 'build-arch' failed dpkg-buildpackage: error: debian/rules build-arch gave error exit status 2 ──────────────────────────────────────────────────────────────────────────────── Build finished at 20140617-1521 Finished ──────── E: Build failure (dpkg-buildpackage died) ┌──────────────────────────────────────────────────────────────────────────────┐ │ Cleanup │ └──────────────────────────────────────────────────────────────────────────────┘ Purging /«BUILDDIR» Not cleaning session: cloned chroot in use ┌──────────────────────────────────────────────────────────────────────────────┐ │ Summary │ └──────────────────────────────────────────────────────────────────────────────┘ Build Architecture: amd64 Build-Space: 336 Build-Time: 3 Distribution: unstable Fail-Stage: build Host Architecture: amd64 Install-Time: 8 Job: hardening-wrapper_2.5 Machine Architecture: amd64 Package: hardening-wrapper Package-Time: 39 Source-Version: 2.5 Space: 336 Status: attempted Version: 2.5clang1 ──────────────────────────────────────────────────────────────────────────────── Finished at 20140617-1521 Build needed 00:00:39, 336k disc space DC-Status: Failed 40.432586316s DC-Time-Estimation: 40.432586316 versus expected 124 (r/m: 2.066833247590958 ; m: 40.432586316)