DC-Build-Header: hardening-wrapper 2.8+nmu2 / 2016-08-29 17:07:50 +0000 DC-Task: type:rebuild-binarch-only source:hardening-wrapper version:2.8+nmu2 chroot:unstable esttime:31 logfile:/tmp/hardening-wrapper_2.8+nmu2_unstable_clang3.8.log modes:clang:binarch-only DC-Sbuild-call: su user42 -c 'sbuild -n --arch-any --apt-update -d unstable -v --chroot-setup-commands=/tmp/clang hardening-wrapper_2.8+nmu2' sbuild (Debian sbuild) 0.70.0 (03 Aug 2016) on ip-172-31-15-167.eu-central-1.compute.internal +==============================================================================+ | hardening-wrapper 2.8+nmu2 (amd64) Mon, 29 Aug 2016 17:07:50 +0000 | +==============================================================================+ Package: hardening-wrapper Version: 2.8+nmu2 Source Version: 2.8+nmu2 Distribution: unstable Machine Architecture: amd64 Host Architecture: amd64 Build Architecture: amd64 I: NOTICE: Log filtering will replace 'var/lib/schroot/mount/unstable-amd64-sbuild-3491a0fa-63f5-40e6-b182-1277a4875598' with '<>' +------------------------------------------------------------------------------+ | Chroot Setup Commands | +------------------------------------------------------------------------------+ /tmp/clang ---------- + echo 'Entering customization script...' Entering customization script... + CLANG_VERSION=3.8 + echo 'Install of clang-3.8' Install of clang-3.8 + apt-get update Get:1 http://127.0.0.1:9999/debian unstable InRelease [209 kB] Get:2 http://127.0.0.1:9999/debian unstable/main Sources.diff/Index [27.9 kB] Get:3 http://127.0.0.1:9999/debian unstable/main amd64 Packages.diff/Index [27.9 kB] Get:4 http://127.0.0.1:9999/debian unstable/main Translation-en [5451 kB] Get:5 http://127.0.0.1:9999/debian unstable/main Sources 2016-08-29-0319.00.pdiff [16.7 kB] Get:6 http://127.0.0.1:9999/debian unstable/main Sources 2016-08-29-0916.07.pdiff [5442 B] Get:6 http://127.0.0.1:9999/debian unstable/main Sources 2016-08-29-0916.07.pdiff [5442 B] Get:7 http://127.0.0.1:9999/debian unstable/main amd64 Packages 2016-08-29-0319.00.pdiff [13.2 kB] Get:8 http://127.0.0.1:9999/debian unstable/main amd64 Packages 2016-08-29-0916.07.pdiff [3300 B] Get:8 http://127.0.0.1:9999/debian unstable/main amd64 Packages 2016-08-29-0916.07.pdiff [3300 B] Fetched 5755 kB in 2s (1971 kB/s) Reading package lists... W: No sandbox user '_apt' on the system, can not drop privileges + apt-get install --yes --no-install-recommends --force-yes clang-3.8 Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: libbsd0 libclang-common-3.8-dev libclang1-3.8 libedit2 libffi6 libllvm3.8 libobjc-6-dev libobjc4 Suggested packages: gnustep gnustep-devel clang-3.8-doc Recommended packages: llvm-3.8-dev python The following NEW packages will be installed: clang-3.8 libbsd0 libclang-common-3.8-dev libclang1-3.8 libedit2 libffi6 libllvm3.8 libobjc-6-dev libobjc4 0 upgraded, 9 newly installed, 0 to remove and 1 not upgraded. Need to get 38.3 MB of archives. After this operation, 162 MB of additional disk space will be used. Get:1 http://127.0.0.1:9999/debian unstable/main amd64 libbsd0 amd64 0.8.3-1 [83.0 kB] Get:2 http://127.0.0.1:9999/debian unstable/main amd64 libedit2 amd64 3.1-20150325-1+b1 [85.2 kB] Get:3 http://127.0.0.1:9999/debian unstable/main amd64 libffi6 amd64 3.2.1-4 [20.4 kB] Get:4 http://127.0.0.1:9999/debian unstable/main amd64 libllvm3.8 amd64 1:3.8.1-9 [10.3 MB] Get:5 http://127.0.0.1:9999/debian unstable/main amd64 libobjc4 amd64 6.2.0-1 [110 kB] Get:6 http://127.0.0.1:9999/debian unstable/main amd64 libobjc-6-dev amd64 6.2.0-1 [394 kB] Get:7 http://127.0.0.1:9999/debian unstable/main amd64 libclang1-3.8 amd64 1:3.8.1-9 [4188 kB] Get:8 http://127.0.0.1:9999/debian unstable/main amd64 libclang-common-3.8-dev amd64 1:3.8.1-9 [1477 kB] Get:9 http://127.0.0.1:9999/debian unstable/main amd64 clang-3.8 amd64 1:3.8.1-9 [21.6 MB] debconf: delaying package configuration, since apt-utils is not installed Fetched 38.3 MB in 0s (96.8 MB/s) Selecting previously unselected package libbsd0:amd64. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 9446 files and directories currently installed.) Preparing to unpack .../0-libbsd0_0.8.3-1_amd64.deb ... Unpacking libbsd0:amd64 (0.8.3-1) ... Selecting previously unselected package libedit2:amd64. Preparing to unpack .../1-libedit2_3.1-20150325-1+b1_amd64.deb ... Unpacking libedit2:amd64 (3.1-20150325-1+b1) ... Selecting previously unselected package libffi6:amd64. Preparing to unpack .../2-libffi6_3.2.1-4_amd64.deb ... Unpacking libffi6:amd64 (3.2.1-4) ... Selecting previously unselected package libllvm3.8:amd64. Preparing to unpack .../3-libllvm3.8_1%3a3.8.1-9_amd64.deb ... Unpacking libllvm3.8:amd64 (1:3.8.1-9) ... Selecting previously unselected package libobjc4:amd64. Preparing to unpack .../4-libobjc4_6.2.0-1_amd64.deb ... Unpacking libobjc4:amd64 (6.2.0-1) ... Selecting previously unselected package libobjc-6-dev:amd64. Preparing to unpack .../5-libobjc-6-dev_6.2.0-1_amd64.deb ... Unpacking libobjc-6-dev:amd64 (6.2.0-1) ... Selecting previously unselected package libclang1-3.8:amd64. Preparing to unpack .../6-libclang1-3.8_1%3a3.8.1-9_amd64.deb ... Unpacking libclang1-3.8:amd64 (1:3.8.1-9) ... Selecting previously unselected package libclang-common-3.8-dev. Preparing to unpack .../7-libclang-common-3.8-dev_1%3a3.8.1-9_amd64.deb ... Unpacking libclang-common-3.8-dev (1:3.8.1-9) ... Selecting previously unselected package clang-3.8. Preparing to unpack .../8-clang-3.8_1%3a3.8.1-9_amd64.deb ... Unpacking clang-3.8 (1:3.8.1-9) ... Setting up libobjc4:amd64 (6.2.0-1) ... Setting up libbsd0:amd64 (0.8.3-1) ... Processing triggers for libc-bin (2.23-5) ... Setting up libobjc-6-dev:amd64 (6.2.0-1) ... Setting up libffi6:amd64 (3.2.1-4) ... Setting up libedit2:amd64 (3.1-20150325-1+b1) ... Setting up libllvm3.8:amd64 (1:3.8.1-9) ... Setting up libclang-common-3.8-dev (1:3.8.1-9) ... Setting up libclang1-3.8:amd64 (1:3.8.1-9) ... Setting up clang-3.8 (1:3.8.1-9) ... Processing triggers for libc-bin (2.23-5) ... W: --force-yes is deprecated, use one of the options starting with --allow instead. W: No sandbox user '_apt' on the system, can not drop privileges + echo 'Replace gcc, g++ & cpp by clang' Replace gcc, g++ & cpp by clang + VERSIONS='4.6 4.7 4.8 4.9 5 6' + cd /usr/bin + for VERSION in '$VERSIONS' + rm -f g++-4.6 gcc-4.6 cpp-4.6 gcc + ln -s clang++-3.8 g++-4.6 + ln -s clang-3.8 gcc-4.6 + ln -s clang-3.8 cpp-4.6 + ln -s clang-3.8 gcc + echo 'gcc-4.6 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: gcc-4.6 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + echo 'g++-4.6 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: g++-4.6 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + for VERSION in '$VERSIONS' + rm -f g++-4.7 gcc-4.7 cpp-4.7 gcc + ln -s clang++-3.8 g++-4.7 + ln -s clang-3.8 gcc-4.7 + ln -s clang-3.8 cpp-4.7 + ln -s clang-3.8 gcc + echo 'gcc-4.7 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: gcc-4.7 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + echo 'g++-4.7 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: g++-4.7 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + for VERSION in '$VERSIONS' + rm -f g++-4.8 gcc-4.8 cpp-4.8 gcc + ln -s clang++-3.8 g++-4.8 + ln -s clang-3.8 gcc-4.8 + ln -s clang-3.8 cpp-4.8 + ln -s clang-3.8 gcc + echo 'gcc-4.8 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: gcc-4.8 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + echo 'g++-4.8 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: g++-4.8 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + for VERSION in '$VERSIONS' + rm -f g++-4.9 gcc-4.9 cpp-4.9 gcc + ln -s clang++-3.8 g++-4.9 + ln -s clang-3.8 gcc-4.9 + ln -s clang-3.8 cpp-4.9 + ln -s clang-3.8 gcc + echo 'gcc-4.9 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: gcc-4.9 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + echo 'g++-4.9 hold' + dpkg --set-selections dpkg: warning: package not in database at line 1: g++-4.9 dpkg: warning: found unknown packages; this might mean the available database is outdated, and needs to be updated through a frontend method + for VERSION in '$VERSIONS' + rm -f g++-5 gcc-5 cpp-5 gcc + ln -s clang++-3.8 g++-5 + ln -s clang-3.8 gcc-5 + ln -s clang-3.8 cpp-5 + ln -s clang-3.8 gcc + echo 'gcc-5 hold' + dpkg --set-selections + echo 'g++-5 hold' + dpkg --set-selections + for VERSION in '$VERSIONS' + rm -f g++-6 gcc-6 cpp-6 gcc + ln -s clang++-3.8 g++-6 + ln -s clang-3.8 gcc-6 + ln -s clang-3.8 cpp-6 + ln -s clang-3.8 gcc + echo 'gcc-6 hold' + dpkg --set-selections + echo 'g++-6 hold' + dpkg --set-selections + cd - /build/hardening-wrapper-1nqcbi + echo 'Check if gcc, g++ & cpp are actually clang' Check if gcc, g++ & cpp are actually clang + gcc --version + grep clang + cpp --version + grep clang + g++ --version + grep clang I: Finished running '/tmp/clang'. Finished processing commands. -------------------------------------------------------------------------------- +------------------------------------------------------------------------------+ | Update chroot | +------------------------------------------------------------------------------+ Hit:1 http://127.0.0.1:9999/debian unstable InRelease Reading package lists... W: No sandbox user '_apt' on the system, can not drop privileges Reading package lists... Building dependency tree... Reading state information... Calculating upgrade... The following packages will be upgraded: linux-libc-dev 1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 1158 kB of archives. After this operation, 60.4 kB of additional disk space will be used. Get:1 http://127.0.0.1:9999/debian unstable/main amd64 linux-libc-dev amd64 4.7.2-1 [1158 kB] debconf: delaying package configuration, since apt-utils is not installed Fetched 1158 kB in 0s (70.5 MB/s) (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 9769 files and directories currently installed.) Preparing to unpack .../linux-libc-dev_4.7.2-1_amd64.deb ... Unpacking linux-libc-dev:amd64 (4.7.2-1) over (4.6.4-1) ... Setting up linux-libc-dev:amd64 (4.7.2-1) ... W: No sandbox user '_apt' on the system, can not drop privileges +------------------------------------------------------------------------------+ | Fetch source files | +------------------------------------------------------------------------------+ Check APT --------- Checking available source versions... Download source files with APT ------------------------------ Reading package lists... NOTICE: 'hardening-wrapper' packaging is maintained in the 'Bzr' version control system at: http://anonscm.debian.org/bzr/hardening/master Please use: bzr branch http://anonscm.debian.org/bzr/hardening/master to retrieve the latest (possibly unreleased) updates to the package. Need to get 21.9 kB of source archives. Get:1 http://127.0.0.1:9999/debian unstable/main hardening-wrapper 2.8+nmu2 (dsc) [1839 B] Get:2 http://127.0.0.1:9999/debian unstable/main hardening-wrapper 2.8+nmu2 (tar) [20.0 kB] Fetched 21.9 kB in 0s (249 kB/s) Download complete and in download only mode I: NOTICE: Log filtering will replace 'build/hardening-wrapper-1nqcbi/hardening-wrapper-2.8+nmu2' with '<>' I: NOTICE: Log filtering will replace 'build/hardening-wrapper-1nqcbi' with '<>' +------------------------------------------------------------------------------+ | Install build-essential | +------------------------------------------------------------------------------+ Setup apt archive ----------------- Merged Build-Depends: build-essential, fakeroot Filtered Build-Depends: build-essential, fakeroot dpkg-deb: building package 'sbuild-build-depends-core-dummy' in '/<>/resolver-hdeg60/apt_archive/sbuild-build-depends-core-dummy.deb'. dpkg-scanpackages: warning: Packages in archive but missing from override file: dpkg-scanpackages: warning: sbuild-build-depends-core-dummy dpkg-scanpackages: info: Wrote 1 entries to output Packages file. Ign:1 copy:/<>/resolver-hdeg60/apt_archive ./ InRelease Get:2 copy:/<>/resolver-hdeg60/apt_archive ./ Release [957 B] Ign:3 copy:/<>/resolver-hdeg60/apt_archive ./ Release.gpg Get:4 copy:/<>/resolver-hdeg60/apt_archive ./ Sources [349 B] Get:5 copy:/<>/resolver-hdeg60/apt_archive ./ Packages [428 B] Fetched 1734 B in 0s (0 B/s) Reading package lists... W: No sandbox user '_apt' on the system, can not drop privileges Reading package lists... Install core build dependencies (apt-based resolver) ---------------------------------------------------- Installing build dependencies Reading package lists... Building dependency tree... Reading state information... The following NEW packages will be installed: sbuild-build-depends-core-dummy 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 776 B of archives. After this operation, 0 B of additional disk space will be used. Get:1 copy:/<>/resolver-hdeg60/apt_archive ./ sbuild-build-depends-core-dummy 0.invalid.0 [776 B] debconf: delaying package configuration, since apt-utils is not installed Fetched 776 B in 0s (0 B/s) Selecting previously unselected package sbuild-build-depends-core-dummy. (Reading database ... 9775 files and directories currently installed.) Preparing to unpack .../sbuild-build-depends-core-dummy_0.invalid.0_amd64.deb ... Unpacking sbuild-build-depends-core-dummy (0.invalid.0) ... Setting up sbuild-build-depends-core-dummy (0.invalid.0) ... W: No sandbox user '_apt' on the system, can not drop privileges +------------------------------------------------------------------------------+ | Check architectures | +------------------------------------------------------------------------------+ Arch check ok (amd64 included in any all) +------------------------------------------------------------------------------+ | Install package build dependencies | +------------------------------------------------------------------------------+ Setup apt archive ----------------- Merged Build-Depends: debhelper (>= 9), perl-base (>= 5.10) Filtered Build-Depends: debhelper (>= 9), perl-base (>= 5.10) dpkg-deb: building package 'sbuild-build-depends-hardening-wrapper-dummy' in '/<>/resolver-Mv1xiv/apt_archive/sbuild-build-depends-hardening-wrapper-dummy.deb'. dpkg-scanpackages: warning: Packages in archive but missing from override file: dpkg-scanpackages: warning: sbuild-build-depends-hardening-wrapper-dummy dpkg-scanpackages: info: Wrote 1 entries to output Packages file. Ign:1 copy:/<>/resolver-Mv1xiv/apt_archive ./ InRelease Get:2 copy:/<>/resolver-Mv1xiv/apt_archive ./ Release [957 B] Ign:3 copy:/<>/resolver-Mv1xiv/apt_archive ./ Release.gpg Get:4 copy:/<>/resolver-Mv1xiv/apt_archive ./ Sources [362 B] Get:5 copy:/<>/resolver-Mv1xiv/apt_archive ./ Packages [452 B] Fetched 1771 B in 0s (0 B/s) Reading package lists... W: No sandbox user '_apt' on the system, can not drop privileges Reading package lists... Install hardening-wrapper build dependencies (apt-based resolver) ----------------------------------------------------------------- Installing build dependencies Reading package lists... Building dependency tree... Reading state information... The following additional packages will be installed: autoconf automake autopoint autotools-dev bsdmainutils debhelper dh-autoreconf dh-strip-nondeterminism file gettext gettext-base groff-base intltool-debian libarchive-zip-perl libcroco3 libfile-stripnondeterminism-perl libglib2.0-0 libicu57 libmagic-mgc libmagic1 libpipeline1 libsigsegv2 libtimedate-perl libtool libunistring0 libxml2 m4 man-db po-debconf Suggested packages: autoconf-archive gnu-standards autoconf-doc wamerican | wordlist whois vacation dh-make gettext-doc libasprintf-dev libgettextpo-dev groff libtool-doc gfortran | fortran95-compiler gcj-jdk less www-browser libmail-box-perl Recommended packages: curl | wget | lynx-cur libglib2.0-data shared-mime-info xdg-user-dirs libltdl-dev xml-core libmail-sendmail-perl The following NEW packages will be installed: autoconf automake autopoint autotools-dev bsdmainutils debhelper dh-autoreconf dh-strip-nondeterminism file gettext gettext-base groff-base intltool-debian libarchive-zip-perl libcroco3 libfile-stripnondeterminism-perl libglib2.0-0 libicu57 libmagic-mgc libmagic1 libpipeline1 libsigsegv2 libtimedate-perl libtool libunistring0 libxml2 m4 man-db po-debconf sbuild-build-depends-hardening-wrapper-dummy 0 upgraded, 30 newly installed, 0 to remove and 0 not upgraded. Need to get 19.8 MB of archives. After this operation, 66.7 MB of additional disk space will be used. Get:1 copy:/<>/resolver-Mv1xiv/apt_archive ./ sbuild-build-depends-hardening-wrapper-dummy 0.invalid.0 [794 B] Get:2 http://127.0.0.1:9999/debian unstable/main amd64 groff-base amd64 1.22.3-8 [1162 kB] Get:3 http://127.0.0.1:9999/debian unstable/main amd64 bsdmainutils amd64 9.0.10 [184 kB] Get:4 http://127.0.0.1:9999/debian unstable/main amd64 libpipeline1 amd64 1.4.1-2 [27.6 kB] Get:5 http://127.0.0.1:9999/debian unstable/main amd64 man-db amd64 2.7.5-1 [1003 kB] Get:6 http://127.0.0.1:9999/debian unstable/main amd64 libmagic-mgc amd64 1:5.28-4 [210 kB] Get:7 http://127.0.0.1:9999/debian unstable/main amd64 libmagic1 amd64 1:5.28-4 [109 kB] Get:8 http://127.0.0.1:9999/debian unstable/main amd64 file amd64 1:5.28-4 [62.9 kB] Get:9 http://127.0.0.1:9999/debian unstable/main amd64 gettext-base amd64 0.19.8.1-1 [121 kB] Get:10 http://127.0.0.1:9999/debian unstable/main amd64 libicu57 amd64 57.1-3 [7676 kB] Get:11 http://127.0.0.1:9999/debian unstable/main amd64 libxml2 amd64 2.9.4+dfsg1-1+b1 [919 kB] Get:12 http://127.0.0.1:9999/debian unstable/main amd64 libsigsegv2 amd64 2.10-5 [28.9 kB] Get:13 http://127.0.0.1:9999/debian unstable/main amd64 m4 amd64 1.4.17-5 [255 kB] Get:14 http://127.0.0.1:9999/debian unstable/main amd64 autoconf all 2.69-10 [338 kB] Get:15 http://127.0.0.1:9999/debian unstable/main amd64 autotools-dev all 20160430.1 [72.6 kB] Get:16 http://127.0.0.1:9999/debian unstable/main amd64 automake all 1:1.15-4 [735 kB] Get:17 http://127.0.0.1:9999/debian unstable/main amd64 autopoint all 0.19.8.1-1 [433 kB] Get:18 http://127.0.0.1:9999/debian unstable/main amd64 libglib2.0-0 amd64 2.48.1-3 [2707 kB] Get:19 http://127.0.0.1:9999/debian unstable/main amd64 libcroco3 amd64 0.6.11-1 [143 kB] Get:20 http://127.0.0.1:9999/debian unstable/main amd64 libunistring0 amd64 0.9.6+really0.9.3-0.1 [279 kB] Get:21 http://127.0.0.1:9999/debian unstable/main amd64 gettext amd64 0.19.8.1-1 [1493 kB] Get:22 http://127.0.0.1:9999/debian unstable/main amd64 intltool-debian all 0.35.0+20060710.4 [26.3 kB] Get:23 http://127.0.0.1:9999/debian unstable/main amd64 po-debconf all 1.0.19 [249 kB] Get:24 http://127.0.0.1:9999/debian unstable/main amd64 libarchive-zip-perl all 1.59-1 [95.5 kB] Get:25 http://127.0.0.1:9999/debian unstable/main amd64 libfile-stripnondeterminism-perl all 0.023-2 [13.4 kB] Get:26 http://127.0.0.1:9999/debian unstable/main amd64 libtimedate-perl all 2.3000-2 [42.2 kB] Get:27 http://127.0.0.1:9999/debian unstable/main amd64 dh-strip-nondeterminism all 0.023-2 [8202 B] Get:28 http://127.0.0.1:9999/debian unstable/main amd64 libtool all 2.4.6-2 [545 kB] Get:29 http://127.0.0.1:9999/debian unstable/main amd64 dh-autoreconf all 12 [15.8 kB] Get:30 http://127.0.0.1:9999/debian unstable/main amd64 debhelper all 9.20160814 [800 kB] debconf: delaying package configuration, since apt-utils is not installed Fetched 19.8 MB in 0s (88.2 MB/s) Selecting previously unselected package groff-base. (Reading database ... 9775 files and directories currently installed.) Preparing to unpack .../00-groff-base_1.22.3-8_amd64.deb ... Unpacking groff-base (1.22.3-8) ... Selecting previously unselected package bsdmainutils. Preparing to unpack .../01-bsdmainutils_9.0.10_amd64.deb ... Unpacking bsdmainutils (9.0.10) ... Selecting previously unselected package libpipeline1:amd64. Preparing to unpack .../02-libpipeline1_1.4.1-2_amd64.deb ... Unpacking libpipeline1:amd64 (1.4.1-2) ... Selecting previously unselected package man-db. Preparing to unpack .../03-man-db_2.7.5-1_amd64.deb ... Unpacking man-db (2.7.5-1) ... Selecting previously unselected package libmagic-mgc. Preparing to unpack .../04-libmagic-mgc_1%3a5.28-4_amd64.deb ... Unpacking libmagic-mgc (1:5.28-4) ... Selecting previously unselected package libmagic1:amd64. Preparing to unpack .../05-libmagic1_1%3a5.28-4_amd64.deb ... Unpacking libmagic1:amd64 (1:5.28-4) ... Selecting previously unselected package file. Preparing to unpack .../06-file_1%3a5.28-4_amd64.deb ... Unpacking file (1:5.28-4) ... Selecting previously unselected package gettext-base. Preparing to unpack .../07-gettext-base_0.19.8.1-1_amd64.deb ... Unpacking gettext-base (0.19.8.1-1) ... Selecting previously unselected package libicu57:amd64. Preparing to unpack .../08-libicu57_57.1-3_amd64.deb ... Unpacking libicu57:amd64 (57.1-3) ... Selecting previously unselected package libxml2:amd64. Preparing to unpack .../09-libxml2_2.9.4+dfsg1-1+b1_amd64.deb ... Unpacking libxml2:amd64 (2.9.4+dfsg1-1+b1) ... Selecting previously unselected package libsigsegv2:amd64. Preparing to unpack .../10-libsigsegv2_2.10-5_amd64.deb ... Unpacking libsigsegv2:amd64 (2.10-5) ... Selecting previously unselected package m4. Preparing to unpack .../11-m4_1.4.17-5_amd64.deb ... Unpacking m4 (1.4.17-5) ... Selecting previously unselected package autoconf. Preparing to unpack .../12-autoconf_2.69-10_all.deb ... Unpacking autoconf (2.69-10) ... Selecting previously unselected package autotools-dev. Preparing to unpack .../13-autotools-dev_20160430.1_all.deb ... Unpacking autotools-dev (20160430.1) ... Selecting previously unselected package automake. Preparing to unpack .../14-automake_1%3a1.15-4_all.deb ... Unpacking automake (1:1.15-4) ... Selecting previously unselected package autopoint. Preparing to unpack .../15-autopoint_0.19.8.1-1_all.deb ... Unpacking autopoint (0.19.8.1-1) ... Selecting previously unselected package libglib2.0-0:amd64. Preparing to unpack .../16-libglib2.0-0_2.48.1-3_amd64.deb ... Unpacking libglib2.0-0:amd64 (2.48.1-3) ... Selecting previously unselected package libcroco3:amd64. Preparing to unpack .../17-libcroco3_0.6.11-1_amd64.deb ... Unpacking libcroco3:amd64 (0.6.11-1) ... Selecting previously unselected package libunistring0:amd64. Preparing to unpack .../18-libunistring0_0.9.6+really0.9.3-0.1_amd64.deb ... Unpacking libunistring0:amd64 (0.9.6+really0.9.3-0.1) ... Selecting previously unselected package gettext. Preparing to unpack .../19-gettext_0.19.8.1-1_amd64.deb ... Unpacking gettext (0.19.8.1-1) ... Selecting previously unselected package intltool-debian. Preparing to unpack .../20-intltool-debian_0.35.0+20060710.4_all.deb ... Unpacking intltool-debian (0.35.0+20060710.4) ... Selecting previously unselected package po-debconf. Preparing to unpack .../21-po-debconf_1.0.19_all.deb ... Unpacking po-debconf (1.0.19) ... Selecting previously unselected package libarchive-zip-perl. Preparing to unpack .../22-libarchive-zip-perl_1.59-1_all.deb ... Unpacking libarchive-zip-perl (1.59-1) ... Selecting previously unselected package libfile-stripnondeterminism-perl. Preparing to unpack .../23-libfile-stripnondeterminism-perl_0.023-2_all.deb ... Unpacking libfile-stripnondeterminism-perl (0.023-2) ... Selecting previously unselected package libtimedate-perl. Preparing to unpack .../24-libtimedate-perl_2.3000-2_all.deb ... Unpacking libtimedate-perl (2.3000-2) ... Selecting previously unselected package dh-strip-nondeterminism. Preparing to unpack .../25-dh-strip-nondeterminism_0.023-2_all.deb ... Unpacking dh-strip-nondeterminism (0.023-2) ... Selecting previously unselected package libtool. Preparing to unpack .../26-libtool_2.4.6-2_all.deb ... Unpacking libtool (2.4.6-2) ... Selecting previously unselected package dh-autoreconf. Preparing to unpack .../27-dh-autoreconf_12_all.deb ... Unpacking dh-autoreconf (12) ... Selecting previously unselected package debhelper. Preparing to unpack .../28-debhelper_9.20160814_all.deb ... Unpacking debhelper (9.20160814) ... Selecting previously unselected package sbuild-build-depends-hardening-wrapper-dummy. Preparing to unpack .../29-sbuild-build-depends-hardening-wrapper-dummy_0.invalid.0_amd64.deb ... Unpacking sbuild-build-depends-hardening-wrapper-dummy (0.invalid.0) ... Setting up libarchive-zip-perl (1.59-1) ... Setting up libtimedate-perl (2.3000-2) ... Setting up libsigsegv2:amd64 (2.10-5) ... Setting up groff-base (1.22.3-8) ... Setting up libglib2.0-0:amd64 (2.48.1-3) ... No schema files found: doing nothing. Setting up gettext-base (0.19.8.1-1) ... Setting up libpipeline1:amd64 (1.4.1-2) ... Setting up m4 (1.4.17-5) ... Setting up libicu57:amd64 (57.1-3) ... Setting up libxml2:amd64 (2.9.4+dfsg1-1+b1) ... Setting up libmagic-mgc (1:5.28-4) ... Setting up libmagic1:amd64 (1:5.28-4) ... Setting up libcroco3:amd64 (0.6.11-1) ... Processing triggers for libc-bin (2.23-5) ... Setting up autotools-dev (20160430.1) ... Setting up libunistring0:amd64 (0.9.6+really0.9.3-0.1) ... Setting up bsdmainutils (9.0.10) ... update-alternatives: using /usr/bin/bsd-write to provide /usr/bin/write (write) in auto mode update-alternatives: using /usr/bin/bsd-from to provide /usr/bin/from (from) in auto mode Setting up autopoint (0.19.8.1-1) ... Setting up libfile-stripnondeterminism-perl (0.023-2) ... Setting up gettext (0.19.8.1-1) ... Setting up autoconf (2.69-10) ... Setting up file (1:5.28-4) ... Setting up intltool-debian (0.35.0+20060710.4) ... Setting up automake (1:1.15-4) ... update-alternatives: using /usr/bin/automake-1.15 to provide /usr/bin/automake (automake) in auto mode Setting up man-db (2.7.5-1) ... Not building database; man-db/auto-update is not 'true'. Setting up libtool (2.4.6-2) ... Setting up po-debconf (1.0.19) ... Setting up dh-autoreconf (12) ... Setting up debhelper (9.20160814) ... Setting up sbuild-build-depends-hardening-wrapper-dummy (0.invalid.0) ... Setting up dh-strip-nondeterminism (0.023-2) ... Processing triggers for libc-bin (2.23-5) ... W: No sandbox user '_apt' on the system, can not drop privileges +------------------------------------------------------------------------------+ | Build environment | +------------------------------------------------------------------------------+ Kernel: Linux 3.16.0-4-amd64 amd64 (x86_64) Toolchain package versions: binutils_2.27-6 dpkg-dev_1.18.10 g++-6_6.2.0-1 gcc-6_6.2.0-1 libc6-dev_2.23-5 libstdc++-6-dev_6.2.0-1 libstdc++6_6.2.0-1 linux-libc-dev_4.7.2-1 Package versions: adduser_3.115 apt_1.3~rc2 autoconf_2.69-10 automake_1:1.15-4 autopoint_0.19.8.1-1 autotools-dev_20160430.1 base-files_9.6 base-passwd_3.5.40 bash_4.3-15 binutils_2.27-6 bsdmainutils_9.0.10 bsdutils_1:2.28.1-1 build-essential_12.2 bzip2_1.0.6-8 clang-3.8_1:3.8.1-9 coreutils_8.25-2 cpp_4:6.1.1-1 cpp-6_6.2.0-1 dash_0.5.8-2.3 debconf_1.5.59 debfoster_2.7-2.1 debhelper_9.20160814 debian-archive-keyring_2014.3 debianutils_4.8 dh-autoreconf_12 dh-strip-nondeterminism_0.023-2 diffutils_1:3.3-3 dpkg_1.18.10 dpkg-dev_1.18.10 e2fslibs_1.43.1-1 e2fsprogs_1.43.1-1 eatmydata_105-3 fakeroot_1.21-1 file_1:5.28-4 findutils_4.6.0+git+20160703-2 g++_4:6.1.1-1 g++-6_6.2.0-1 gcc_4:6.1.1-1 gcc-6_6.2.0-1 gcc-6-base_6.2.0-1 gettext_0.19.8.1-1 gettext-base_0.19.8.1-1 gpgv_2.1.14-5 grep_2.25-6 groff-base_1.22.3-8 gzip_1.6-5 hostname_3.18 init-system-helpers_1.42 intltool-debian_0.35.0+20060710.4 libacl1_2.2.52-3 libapt-pkg5.0_1.3~rc2 libarchive-zip-perl_1.59-1 libasan3_6.2.0-1 libatomic1_6.2.0-1 libattr1_1:2.4.47-2 libaudit-common_1:2.6.6-1 libaudit1_1:2.6.6-1 libblkid1_2.28.1-1 libbsd0_0.8.3-1 libbz2-1.0_1.0.6-8 libc-bin_2.23-5 libc-dev-bin_2.23-5 libc6_2.23-5 libc6-dev_2.23-5 libcap-ng0_0.7.7-3 libcc1-0_6.2.0-1 libcilkrts5_6.2.0-1 libclang-common-3.8-dev_1:3.8.1-9 libclang1-3.8_1:3.8.1-9 libcomerr2_1.43.1-1 libcroco3_0.6.11-1 libdb5.3_5.3.28-12 libdebconfclient0_0.215 libdpkg-perl_1.18.10 libeatmydata1_105-3 libedit2_3.1-20150325-1+b1 libfakeroot_1.21-1 libfdisk1_2.28.1-1 libffi6_3.2.1-4 libfile-stripnondeterminism-perl_0.023-2 libgc1c2_1:7.4.2-8 libgcc-6-dev_6.2.0-1 libgcc1_1:6.2.0-1 libgcrypt20_1.7.3-1 libgdbm3_1.8.3-14 libglib2.0-0_2.48.1-3 libgmp10_2:6.1.1+dfsg-1 libgomp1_6.2.0-1 libgpg-error0_1.24-1 libicu57_57.1-3 libisl15_0.17.1-1 libitm1_6.2.0-1 libllvm3.8_1:3.8.1-9 liblsan0_6.2.0-1 liblz4-1_0.0~r131-2 liblzma5_5.1.1alpha+20120614-2.1 libmagic-mgc_1:5.28-4 libmagic1_1:5.28-4 libmount1_2.28.1-1 libmpc3_1.0.3-1 libmpfr4_3.1.4-2 libmpx2_6.2.0-1 libncurses5_6.0+20160625-1 libncursesw5_6.0+20160625-1 libobjc-6-dev_6.2.0-1 libobjc4_6.2.0-1 libpam-modules_1.1.8-3.3 libpam-modules-bin_1.1.8-3.3 libpam-runtime_1.1.8-3.3 libpam0g_1.1.8-3.3 libpcre3_2:8.39-2 libperl5.22_5.22.2-3 libpipeline1_1.4.1-2 libquadmath0_6.2.0-1 libselinux1_2.5-3 libsemanage-common_2.5-1 libsemanage1_2.5-1 libsepol1_2.5-1 libsigsegv2_2.10-5 libsmartcols1_2.28.1-1 libss2_1.43.1-1 libstdc++-6-dev_6.2.0-1 libstdc++6_6.2.0-1 libsystemd0_231-5 libtimedate-perl_2.3000-2 libtinfo5_6.0+20160625-1 libtool_2.4.6-2 libtsan0_6.2.0-1 libubsan0_6.2.0-1 libudev1_231-5 libunistring0_0.9.6+really0.9.3-0.1 libustr-1.0-1_1.0.4-5 libuuid1_2.28.1-1 libxml2_2.9.4+dfsg1-1+b1 linux-libc-dev_4.7.2-1 login_1:4.2-3.1 m4_1.4.17-5 make_4.1-9 man-db_2.7.5-1 mawk_1.3.3-17 mount_2.28.1-1 multiarch-support_2.23-5 ncurses-base_6.0+20160625-1 ncurses-bin_6.0+20160625-1 passwd_1:4.2-3.1 patch_2.7.5-1 perl_5.22.2-3 perl-base_5.22.2-3 perl-modules-5.22_5.22.2-3 po-debconf_1.0.19 sbuild-build-depends-core-dummy_0.invalid.0 sbuild-build-depends-hardening-wrapper-dummy_0.invalid.0 sed_4.2.2-7.1 sensible-utils_0.0.9 sysvinit-utils_2.88dsf-59.8 tar_1.29b-1 util-linux_2.28.1-1 xz-utils_5.1.1alpha+20120614-2.1 zlib1g_1:1.2.8.dfsg-2+b1 +------------------------------------------------------------------------------+ | Build | +------------------------------------------------------------------------------+ Unpack source ------------- gpgv: unknown type of key resource 'trustedkeys.kbx' gpgv: keyblock resource '/sbuild-nonexistent/.gnupg/trustedkeys.kbx': General error gpgv: Signature made Mon Dec 14 17:46:57 2015 UTC using RSA key ID gpgv: Can't check signature: No public key dpkg-source: warning: failed to verify signature on ./hardening-wrapper_2.8+nmu2.dsc dpkg-source: info: extracting hardening-wrapper in /<>/hardening-wrapper-2.8+nmu2 dpkg-source: info: unpacking hardening-wrapper_2.8+nmu2.tar.xz Check disc space ---------------- Sufficient free space for build User Environment ---------------- APT_CONFIG=/var/lib/sbuild/apt.conf HOME=/sbuild-nonexistent LC_ALL=POSIX LOGNAME=user42 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games SCHROOT_ALIAS_NAME=unstable-amd64-sbuild SCHROOT_CHROOT_NAME=unstable-amd64-sbuild SCHROOT_COMMAND=env SCHROOT_GID=1001 SCHROOT_GROUP=user42 SCHROOT_SESSION_ID=unstable-amd64-sbuild-3491a0fa-63f5-40e6-b182-1277a4875598 SCHROOT_UID=1001 SCHROOT_USER=user42 SHELL=/bin/sh USER=user42 dpkg-buildpackage ----------------- dpkg-buildpackage: info: source package hardening-wrapper dpkg-buildpackage: info: source version 2.8+nmu2 dpkg-buildpackage: info: source distribution unstable dpkg-buildpackage: info: source changed by Matthias Klose dpkg-source --before-build hardening-wrapper-2.8+nmu2 dpkg-buildpackage: info: host architecture amd64 fakeroot debian/rules clean dh clean dh_testdir dh_auto_clean make -j1 clean make[1]: Entering directory '/<>/hardening-wrapper-2.8+nmu2' rm -rf build-tree make[1]: Leaving directory '/<>/hardening-wrapper-2.8+nmu2' debian/rules override_dh_clean make[1]: Entering directory '/<>/hardening-wrapper-2.8+nmu2' for f in debian/*.in; do \ rm -f ${f%*.in}; \ done dh_clean make[1]: Leaving directory '/<>/hardening-wrapper-2.8+nmu2' debian/rules build-arch dh build-arch dh_testdir -a dh_update_autotools_config -a dh_auto_configure -a dh_auto_build -a make -j1 make[1]: Entering directory '/<>/hardening-wrapper-2.8+nmu2' if [ -z "amd64" ]; then echo No DEB_HOST_ARCH; exit 1; fi if [ -z "linux" ]; then echo No DEB_HOST_ARCH_OS; exit 1; fi mkdir -p build-tree # Construct wrappers. install hardened-cc hardened-ld build-tree/ # Set defaults, based on OS and ARCH. perl -pi -e 's/ #OS#/ '"linux"'/; s/ #ARCH#/ '"amd64"'/;' build-tree/hardened-cc build-tree/hardened-ld perl -pi -e "s/default{'DEB_BUILD_HARDENING_PIE'}=1;/default{'DEB_BUILD_HARDENING_PIE'}=1;/;" build-tree/hardened-cc build-tree/hardened-ld Unescaped left brace in regex is deprecated, passed through in regex; marked by <-- HERE in m/default{ <-- HERE 'DEB_BUILD_HARDENING_PIE'}=1;/ at -e line 1. perl -pi -e "s/default{'DEB_BUILD_HARDENING_STACKPROTECTOR'}=1;/default{'DEB_BUILD_HARDENING_STACKPROTECTOR'}=1;/;" build-tree/hardened-cc build-tree/hardened-ld Unescaped left brace in regex is deprecated, passed through in regex; marked by <-- HERE in m/default{ <-- HERE 'DEB_BUILD_HARDENING_STACKPROTECTOR'}=1;/ at -e line 1. # Duplicate cc wrapper to c++. install build-tree/hardened-cc build-tree/hardened-c++ perl -pi -e 's/hardened-cc/hardened-c++/g; s|/usr/bin/cc|/usr/bin/c++|g;' build-tree/hardened-c++ # Construct tools. install hardening.make hardening-check build-tree/ # Do not use "shell" here because it eats newlines. We want those. perl -pi -e "s/^my %libc;/my %libc = (\n$(perl hardening-check --find-libc-functions /bin/ls)\n);/;" build-tree/hardening-check # Construct man pages. install hardened-cc.1 hardened-ld.1 build-tree/ pod2man hardening-check > build-tree/hardening-check.1 # Duplicate cc man page to c++. install build-tree/hardened-cc.1 build-tree/hardened-c++.1 perl -pi -e 's/hardened-cc/hardened-c++/g; s/gcc/g++/g;' build-tree/hardened-c++.1 touch build-tree/stamp-build make[1]: Leaving directory '/<>/hardening-wrapper-2.8+nmu2' dh_auto_test -a make -j1 check make[1]: Entering directory '/<>/hardening-wrapper-2.8+nmu2' make -C tests check make[2]: Entering directory '/<>/hardening-wrapper-2.8+nmu2/tests' # Check the stack protector and PIE options directly, just to have # a historical record in the build logs. cc -Wall -fstack-protector hello.c -o ../build-tree/cc-test || true ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x400610) cc -Wall -fstack-protector-strong hello.c -o ../build-tree/cc-test || true ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x400610) cc -Wall -fPIE -pie hello.c -o ../build-tree/cc-test || true ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x7f519b957740) ../build-tree/cc-test || true ../build-tree/cc-test: ok (0x7f6a1ed0b740) make -f Makefile.wrapper check make[3]: Entering directory '/<>/hardening-wrapper-2.8+nmu2/tests' # Test basic perl syntax for script in ../build-tree/hardened-cc ../build-tree/hardened-ld ../build-tree/hardened-c++; do perl -c $script; done ../build-tree/hardened-cc syntax OK ../build-tree/hardened-ld syntax OK ../build-tree/hardened-c++ syntax OK touch syntax.stamp # Compiler and linker options disabled. DEB_BUILD_HARDENING=0 ../build-tree/hardened-cc -B ../build-tree/ -o ../build-tree/wrapper-test-stock hello.c /usr/bin/../lib/llvm-3.8/bin/clang -B ../build-tree/ -o ../build-tree/wrapper-test-stock hello.c readelf -ldrsW ../build-tree/wrapper-test-stock Elf file type is EXEC (Executable file) Entry point 0x4004a0 There are 9 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000400040 0x0000000000400040 0x0001f8 0x0001f8 R E 0x8 INTERP 0x000238 0x0000000000400238 0x0000000000400238 0x00001c 0x00001c R 0x1 [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2] LOAD 0x000000 0x0000000000400000 0x0000000000400000 0x000844 0x000844 R E 0x200000 LOAD 0x000e00 0x0000000000600e00 0x0000000000600e00 0x000240 0x000248 RW 0x200000 DYNAMIC 0x000e18 0x0000000000600e18 0x0000000000600e18 0x0001e0 0x0001e0 RW 0x8 NOTE 0x000254 0x0000000000400254 0x0000000000400254 0x000044 0x000044 R 0x4 GNU_EH_FRAME 0x0006f4 0x00000000004006f4 0x00000000004006f4 0x00003c 0x00003c R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RW 0x10 GNU_RELRO 0x000e00 0x0000000000600e00 0x0000000000600e00 0x000200 0x000200 R 0x1 Section to Segment mapping: Segment Sections... 00 01 .interp 02 .interp .note.ABI-tag .note.gnu.build-id .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt .plt.got .text .fini .rodata .eh_frame_hdr .eh_frame 03 .init_array .fini_array .jcr .dynamic .got .got.plt .data .bss 04 .dynamic 05 .note.ABI-tag .note.gnu.build-id 06 .eh_frame_hdr 07 08 .init_array .fini_array .jcr .dynamic .got Dynamic section at offset 0xe18 contains 25 entries: Tag Type Name/Value 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] 0x000000000000000c (INIT) 0x400428 0x000000000000000d (FINI) 0x4006d4 0x0000000000000019 (INIT_ARRAY) 0x600e00 0x000000000000001b (INIT_ARRAYSZ) 8 (bytes) 0x000000000000001a (FINI_ARRAY) 0x600e08 0x000000000000001c (FINI_ARRAYSZ) 8 (bytes) 0x0000000000000004 (HASH) 0x400298 0x000000006ffffef5 (GNU_HASH) 0x4002c0 0x0000000000000005 (STRTAB) 0x400358 0x0000000000000006 (SYMTAB) 0x4002e0 0x000000000000000a (STRSZ) 65 (bytes) 0x000000000000000b (SYMENT) 24 (bytes) 0x0000000000000015 (DEBUG) 0x0 0x0000000000000003 (PLTGOT) 0x601000 0x0000000000000002 (PLTRELSZ) 72 (bytes) 0x0000000000000014 (PLTREL) RELA 0x0000000000000017 (JMPREL) 0x4003e0 0x0000000000000007 (RELA) 0x4003c8 0x0000000000000008 (RELASZ) 24 (bytes) 0x0000000000000009 (RELAENT) 24 (bytes) 0x000000006ffffffe (VERNEED) 0x4003a8 0x000000006fffffff (VERNEEDNUM) 1 0x000000006ffffff0 (VERSYM) 0x40039a 0x0000000000000000 (NULL) 0x0 Relocation section '.rela.dyn' at offset 0x3c8 contains 1 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000600ff8 0000000400000006 R_X86_64_GLOB_DAT 0000000000000000 __gmon_start__ + 0 Relocation section '.rela.plt' at offset 0x3e0 contains 3 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000601018 0000000100000007 R_X86_64_JUMP_SLOT 0000000000000000 printf@GLIBC_2.2.5 + 0 0000000000601020 0000000200000007 R_X86_64_JUMP_SLOT 0000000000000000 snprintf@GLIBC_2.2.5 + 0 0000000000601028 0000000300000007 R_X86_64_JUMP_SLOT 0000000000000000 __libc_start_main@GLIBC_2.2.5 + 0 Symbol table '.dynsym' contains 5 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000000 0 FUNC GLOBAL DEFAULT UND printf@GLIBC_2.2.5 (2) 2: 0000000000000000 0 FUNC GLOBAL DEFAULT UND snprintf@GLIBC_2.2.5 (2) 3: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.2.5 (2) 4: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ Symbol table '.symtab' contains 67 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000400238 0 SECTION LOCAL DEFAULT 1 2: 0000000000400254 0 SECTION LOCAL DEFAULT 2 3: 0000000000400274 0 SECTION LOCAL DEFAULT 3 4: 0000000000400298 0 SECTION LOCAL DEFAULT 4 5: 00000000004002c0 0 SECTION LOCAL DEFAULT 5 6: 00000000004002e0 0 SECTION LOCAL DEFAULT 6 7: 0000000000400358 0 SECTION LOCAL DEFAULT 7 8: 000000000040039a 0 SECTION LOCAL DEFAULT 8 9: 00000000004003a8 0 SECTION LOCAL DEFAULT 9 10: 00000000004003c8 0 SECTION LOCAL DEFAULT 10 11: 00000000004003e0 0 SECTION LOCAL DEFAULT 11 12: 0000000000400428 0 SECTION LOCAL DEFAULT 12 13: 0000000000400450 0 SECTION LOCAL DEFAULT 13 14: 0000000000400490 0 SECTION LOCAL DEFAULT 14 15: 00000000004004a0 0 SECTION LOCAL DEFAULT 15 16: 00000000004006d4 0 SECTION LOCAL DEFAULT 16 17: 00000000004006e0 0 SECTION LOCAL DEFAULT 17 18: 00000000004006f4 0 SECTION LOCAL DEFAULT 18 19: 0000000000400730 0 SECTION LOCAL DEFAULT 19 20: 0000000000600e00 0 SECTION LOCAL DEFAULT 20 21: 0000000000600e08 0 SECTION LOCAL DEFAULT 21 22: 0000000000600e10 0 SECTION LOCAL DEFAULT 22 23: 0000000000600e18 0 SECTION LOCAL DEFAULT 23 24: 0000000000600ff8 0 SECTION LOCAL DEFAULT 24 25: 0000000000601000 0 SECTION LOCAL DEFAULT 25 26: 0000000000601030 0 SECTION LOCAL DEFAULT 26 27: 0000000000601040 0 SECTION LOCAL DEFAULT 27 28: 0000000000000000 0 SECTION LOCAL DEFAULT 28 29: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 30: 0000000000600e10 0 OBJECT LOCAL DEFAULT 22 __JCR_LIST__ 31: 00000000004004d0 0 FUNC LOCAL DEFAULT 15 deregister_tm_clones 32: 0000000000400510 0 FUNC LOCAL DEFAULT 15 register_tm_clones 33: 0000000000400550 0 FUNC LOCAL DEFAULT 15 __do_global_dtors_aux 34: 0000000000601040 1 OBJECT LOCAL DEFAULT 27 completed.6982 35: 0000000000600e08 0 OBJECT LOCAL DEFAULT 21 __do_global_dtors_aux_fini_array_entry 36: 0000000000400570 0 FUNC LOCAL DEFAULT 15 frame_dummy 37: 0000000000600e00 0 OBJECT LOCAL DEFAULT 20 __frame_dummy_init_array_entry 38: 0000000000000000 0 FILE LOCAL DEFAULT ABS hello.c 39: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 40: 0000000000400840 0 OBJECT LOCAL DEFAULT 19 __FRAME_END__ 41: 0000000000600e10 0 OBJECT LOCAL DEFAULT 22 __JCR_END__ 42: 0000000000000000 0 FILE LOCAL DEFAULT ABS 43: 0000000000600e08 0 NOTYPE LOCAL DEFAULT 20 __init_array_end 44: 0000000000600e18 0 OBJECT LOCAL DEFAULT 23 _DYNAMIC 45: 0000000000600e00 0 NOTYPE LOCAL DEFAULT 20 __init_array_start 46: 00000000004006f4 0 NOTYPE LOCAL DEFAULT 18 __GNU_EH_FRAME_HDR 47: 0000000000601000 0 OBJECT LOCAL DEFAULT 25 _GLOBAL_OFFSET_TABLE_ 48: 00000000004006d0 2 FUNC GLOBAL DEFAULT 15 __libc_csu_fini 49: 0000000000601030 0 NOTYPE WEAK DEFAULT 26 data_start 50: 0000000000601040 0 NOTYPE GLOBAL DEFAULT 26 _edata 51: 00000000004006d4 0 FUNC GLOBAL DEFAULT 16 _fini 52: 0000000000000000 0 FUNC GLOBAL DEFAULT UND printf@@GLIBC_2.2.5 53: 0000000000000000 0 FUNC GLOBAL DEFAULT UND snprintf@@GLIBC_2.2.5 54: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@@GLIBC_2.2.5 55: 0000000000601030 0 NOTYPE GLOBAL DEFAULT 26 __data_start 56: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 57: 0000000000601038 0 OBJECT GLOBAL HIDDEN 26 __dso_handle 58: 00000000004005a0 116 FUNC GLOBAL DEFAULT 15 announcement 59: 00000000004006e0 4 OBJECT GLOBAL DEFAULT 17 _IO_stdin_used 60: 0000000000400660 101 FUNC GLOBAL DEFAULT 15 __libc_csu_init 61: 0000000000601048 0 NOTYPE GLOBAL DEFAULT 27 _end 62: 00000000004004a0 42 FUNC GLOBAL DEFAULT 15 _start 63: 0000000000601040 0 NOTYPE GLOBAL DEFAULT 27 __bss_start 64: 0000000000400620 55 FUNC GLOBAL DEFAULT 15 main 65: 0000000000601040 0 OBJECT GLOBAL HIDDEN 26 __TMC_END__ 66: 0000000000400428 0 FUNC GLOBAL DEFAULT 12 _init ../build-tree/wrapper-test-stock ../build-tree/wrapper-test-stock: ok (0x4005a0) # Compiler options enabled. (linker is not wrapper) ../build-tree/hardened-cc -B ../build-tree/ -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-compiled hello.c /usr/bin/../lib/llvm-3.8/bin/clang -fstack-protector-strong -fPIE -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-compiled hello.c readelf -ldrsW ../build-tree/wrapper-test-compiled Elf file type is DYN (Shared object file) Entry point 0x6b0 There are 9 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000000040 0x0000000000000040 0x0001f8 0x0001f8 R E 0x8 INTERP 0x000238 0x0000000000000238 0x0000000000000238 0x00001c 0x00001c R 0x1 [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2] LOAD 0x000000 0x0000000000000000 0x0000000000000000 0x000ad4 0x000ad4 R E 0x200000 LOAD 0x000dd0 0x0000000000200dd0 0x0000000000200dd0 0x000278 0x000280 RW 0x200000 DYNAMIC 0x000de8 0x0000000000200de8 0x0000000000200de8 0x0001f0 0x0001f0 RW 0x8 NOTE 0x000254 0x0000000000000254 0x0000000000000254 0x000044 0x000044 R 0x4 GNU_EH_FRAME 0x000984 0x0000000000000984 0x0000000000000984 0x00003c 0x00003c R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RW 0x10 GNU_RELRO 0x000dd0 0x0000000000200dd0 0x0000000000200dd0 0x000230 0x000230 R 0x1 Section to Segment mapping: Segment Sections... 00 01 .interp 02 .interp .note.ABI-tag .note.gnu.build-id .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt .plt.got .text .fini .rodata .eh_frame_hdr .eh_frame 03 .init_array .fini_array .jcr .dynamic .got .got.plt .data .bss 04 .dynamic 05 .note.ABI-tag .note.gnu.build-id 06 .eh_frame_hdr 07 08 .init_array .fini_array .jcr .dynamic .got Dynamic section at offset 0xde8 contains 27 entries: Tag Type Name/Value 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] 0x000000000000000c (INIT) 0x630 0x000000000000000d (FINI) 0x964 0x0000000000000019 (INIT_ARRAY) 0x200dd0 0x000000000000001b (INIT_ARRAYSZ) 8 (bytes) 0x000000000000001a (FINI_ARRAY) 0x200dd8 0x000000000000001c (FINI_ARRAYSZ) 8 (bytes) 0x0000000000000004 (HASH) 0x298 0x000000006ffffef5 (GNU_HASH) 0x2d8 0x0000000000000005 (STRTAB) 0x3e8 0x0000000000000006 (SYMTAB) 0x2f8 0x000000000000000a (STRSZ) 212 (bytes) 0x000000000000000b (SYMENT) 24 (bytes) 0x0000000000000015 (DEBUG) 0x0 0x0000000000000003 (PLTGOT) 0x201000 0x0000000000000002 (PLTRELSZ) 96 (bytes) 0x0000000000000014 (PLTREL) RELA 0x0000000000000017 (JMPREL) 0x5d0 0x0000000000000007 (RELA) 0x510 0x0000000000000008 (RELASZ) 192 (bytes) 0x0000000000000009 (RELAENT) 24 (bytes) 0x000000006ffffffb (FLAGS_1) Flags: PIE 0x000000006ffffffe (VERNEED) 0x4d0 0x000000006fffffff (VERNEEDNUM) 1 0x000000006ffffff0 (VERSYM) 0x4bc 0x000000006ffffff9 (RELACOUNT) 3 0x0000000000000000 (NULL) 0x0 Relocation section '.rela.dyn' at offset 0x510 contains 8 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000200dd0 0000000000000008 R_X86_64_RELATIVE 7b0 0000000000200dd8 0000000000000008 R_X86_64_RELATIVE 770 0000000000201040 0000000000000008 R_X86_64_RELATIVE 201040 0000000000200fd8 0000000200000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_deregisterTMCloneTable + 0 0000000000200fe0 0000000500000006 R_X86_64_GLOB_DAT 0000000000000000 __gmon_start__ + 0 0000000000200fe8 0000000700000006 R_X86_64_GLOB_DAT 0000000000000000 _Jv_RegisterClasses + 0 0000000000200ff0 0000000800000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_registerTMCloneTable + 0 0000000000200ff8 0000000900000006 R_X86_64_GLOB_DAT 0000000000000000 __cxa_finalize@GLIBC_2.2.5 + 0 Relocation section '.rela.plt' at offset 0x5d0 contains 4 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000201018 0000000100000007 R_X86_64_JUMP_SLOT 0000000000000000 __snprintf_chk@GLIBC_2.3.4 + 0 0000000000201020 0000000300000007 R_X86_64_JUMP_SLOT 0000000000000000 __stack_chk_fail@GLIBC_2.4 + 0 0000000000201028 0000000400000007 R_X86_64_JUMP_SLOT 0000000000000000 __libc_start_main@GLIBC_2.2.5 + 0 0000000000201030 0000000600000007 R_X86_64_JUMP_SLOT 0000000000000000 __printf_chk@GLIBC_2.3.4 + 0 Symbol table '.dynsym' contains 10 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@GLIBC_2.3.4 (2) 2: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 3: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@GLIBC_2.4 (3) 4: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.2.5 (4) 5: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 6: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@GLIBC_2.3.4 (2) 7: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 8: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 9: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@GLIBC_2.2.5 (4) Symbol table '.symtab' contains 80 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000238 0 SECTION LOCAL DEFAULT 1 2: 0000000000000254 0 SECTION LOCAL DEFAULT 2 3: 0000000000000274 0 SECTION LOCAL DEFAULT 3 4: 0000000000000298 0 SECTION LOCAL DEFAULT 4 5: 00000000000002d8 0 SECTION LOCAL DEFAULT 5 6: 00000000000002f8 0 SECTION LOCAL DEFAULT 6 7: 00000000000003e8 0 SECTION LOCAL DEFAULT 7 8: 00000000000004bc 0 SECTION LOCAL DEFAULT 8 9: 00000000000004d0 0 SECTION LOCAL DEFAULT 9 10: 0000000000000510 0 SECTION LOCAL DEFAULT 10 11: 00000000000005d0 0 SECTION LOCAL DEFAULT 11 12: 0000000000000630 0 SECTION LOCAL DEFAULT 12 13: 0000000000000650 0 SECTION LOCAL DEFAULT 13 14: 00000000000006a0 0 SECTION LOCAL DEFAULT 14 15: 00000000000006b0 0 SECTION LOCAL DEFAULT 15 16: 0000000000000964 0 SECTION LOCAL DEFAULT 16 17: 0000000000000970 0 SECTION LOCAL DEFAULT 17 18: 0000000000000984 0 SECTION LOCAL DEFAULT 18 19: 00000000000009c0 0 SECTION LOCAL DEFAULT 19 20: 0000000000200dd0 0 SECTION LOCAL DEFAULT 20 21: 0000000000200dd8 0 SECTION LOCAL DEFAULT 21 22: 0000000000200de0 0 SECTION LOCAL DEFAULT 22 23: 0000000000200de8 0 SECTION LOCAL DEFAULT 23 24: 0000000000200fd8 0 SECTION LOCAL DEFAULT 24 25: 0000000000201000 0 SECTION LOCAL DEFAULT 25 26: 0000000000201038 0 SECTION LOCAL DEFAULT 26 27: 0000000000201048 0 SECTION LOCAL DEFAULT 27 28: 0000000000000000 0 SECTION LOCAL DEFAULT 28 29: 0000000000000000 0 SECTION LOCAL DEFAULT 29 30: 0000000000000000 0 SECTION LOCAL DEFAULT 30 31: 0000000000000000 0 SECTION LOCAL DEFAULT 31 32: 0000000000000000 0 SECTION LOCAL DEFAULT 32 33: 0000000000000000 0 SECTION LOCAL DEFAULT 33 34: 0000000000000000 0 SECTION LOCAL DEFAULT 34 35: 0000000000000000 0 SECTION LOCAL DEFAULT 35 36: 0000000000000000 0 SECTION LOCAL DEFAULT 36 37: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 38: 0000000000200de0 0 OBJECT LOCAL DEFAULT 22 __JCR_LIST__ 39: 00000000000006e0 0 FUNC LOCAL DEFAULT 15 deregister_tm_clones 40: 0000000000000720 0 FUNC LOCAL DEFAULT 15 register_tm_clones 41: 0000000000000770 0 FUNC LOCAL DEFAULT 15 __do_global_dtors_aux 42: 0000000000201048 1 OBJECT LOCAL DEFAULT 27 completed.6982 43: 0000000000200dd8 0 OBJECT LOCAL DEFAULT 21 __do_global_dtors_aux_fini_array_entry 44: 00000000000007b0 0 FUNC LOCAL DEFAULT 15 frame_dummy 45: 0000000000200dd0 0 OBJECT LOCAL DEFAULT 20 __frame_dummy_init_array_entry 46: 0000000000000000 0 FILE LOCAL DEFAULT ABS hello.c 47: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 48: 0000000000000ad0 0 OBJECT LOCAL DEFAULT 19 __FRAME_END__ 49: 0000000000200de0 0 OBJECT LOCAL DEFAULT 22 __JCR_END__ 50: 0000000000000000 0 FILE LOCAL DEFAULT ABS 51: 0000000000200dd8 0 NOTYPE LOCAL DEFAULT 20 __init_array_end 52: 0000000000200de8 0 OBJECT LOCAL DEFAULT 23 _DYNAMIC 53: 0000000000200dd0 0 NOTYPE LOCAL DEFAULT 20 __init_array_start 54: 0000000000000984 0 NOTYPE LOCAL DEFAULT 18 __GNU_EH_FRAME_HDR 55: 0000000000201000 0 OBJECT LOCAL DEFAULT 25 _GLOBAL_OFFSET_TABLE_ 56: 0000000000000960 2 FUNC GLOBAL DEFAULT 15 __libc_csu_fini 57: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@@GLIBC_2.3.4 58: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 59: 0000000000201038 0 NOTYPE WEAK DEFAULT 26 data_start 60: 0000000000201048 0 NOTYPE GLOBAL DEFAULT 26 _edata 61: 0000000000000964 0 FUNC GLOBAL DEFAULT 16 _fini 62: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@@GLIBC_2.4 63: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@@GLIBC_2.2.5 64: 0000000000201038 0 NOTYPE GLOBAL DEFAULT 26 __data_start 65: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 66: 0000000000201040 0 OBJECT GLOBAL HIDDEN 26 __dso_handle 67: 00000000000007e0 126 FUNC GLOBAL DEFAULT 15 announcement 68: 0000000000000970 4 OBJECT GLOBAL DEFAULT 17 _IO_stdin_used 69: 00000000000008f0 101 FUNC GLOBAL DEFAULT 15 __libc_csu_init 70: 0000000000201050 0 NOTYPE GLOBAL DEFAULT 27 _end 71: 00000000000006b0 42 FUNC GLOBAL DEFAULT 15 _start 72: 0000000000201048 0 NOTYPE GLOBAL DEFAULT 27 __bss_start 73: 0000000000000860 134 FUNC GLOBAL DEFAULT 15 main 74: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@@GLIBC_2.3.4 75: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 76: 0000000000201048 0 OBJECT GLOBAL HIDDEN 26 __TMC_END__ 77: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 78: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@@GLIBC_2.2.5 79: 0000000000000630 0 FUNC GLOBAL DEFAULT 12 _init # Run twice to show off PIE, if available in kernel ../build-tree/wrapper-test-compiled ../build-tree/wrapper-test-compiled: ok (0x7f66bbfa17e0) ../build-tree/wrapper-test-compiled ../build-tree/wrapper-test-compiled: ok (0x7f38635957e0) # Enable symlink for ld to trick gcc into doing wrapped linking (cd ../build-tree && ln -s hardened-ld ld) (cd ../build-tree && ln -s hardened-ld ld.gold) # Compiler and linker options enabled. ../build-tree/hardened-cc -B ../build-tree/ -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-linked hello.c /usr/bin/../lib/llvm-3.8/bin/clang -fstack-protector-strong -fPIE -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-linked hello.c /usr/bin/x86_64-linux-gnu-ld.bfd -z relro -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-linked /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0 -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../.. -L/usr/lib/llvm-3.8/bin/../lib -L/lib -L/usr/lib /tmp/hello-40a019.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crtn.o readelf -ldrsW ../build-tree/wrapper-test-linked Elf file type is DYN (Shared object file) Entry point 0x690 There are 9 program headers, starting at offset 64 Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align PHDR 0x000040 0x0000000000000040 0x0000000000000040 0x0001f8 0x0001f8 R E 0x8 INTERP 0x000238 0x0000000000000238 0x0000000000000238 0x00001c 0x00001c R 0x1 [Requesting program interpreter: /lib64/ld-linux-x86-64.so.2] LOAD 0x000000 0x0000000000000000 0x0000000000000000 0x000ab4 0x000ab4 R E 0x200000 LOAD 0x000db8 0x0000000000200db8 0x0000000000200db8 0x000258 0x000260 RW 0x200000 DYNAMIC 0x000dd0 0x0000000000200dd0 0x0000000000200dd0 0x0001d0 0x0001d0 RW 0x8 NOTE 0x000254 0x0000000000000254 0x0000000000000254 0x000044 0x000044 R 0x4 GNU_EH_FRAME 0x000964 0x0000000000000964 0x0000000000000964 0x00003c 0x00003c R 0x4 GNU_STACK 0x000000 0x0000000000000000 0x0000000000000000 0x000000 0x000000 RW 0x10 GNU_RELRO 0x000db8 0x0000000000200db8 0x0000000000200db8 0x000248 0x000248 R 0x1 Section to Segment mapping: Segment Sections... 00 01 .interp 02 .interp .note.ABI-tag .note.gnu.build-id .hash .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .init .plt .plt.got .text .fini .rodata .eh_frame_hdr .eh_frame 03 .init_array .fini_array .jcr .dynamic .got .data .bss 04 .dynamic 05 .note.ABI-tag .note.gnu.build-id 06 .eh_frame_hdr 07 08 .init_array .fini_array .jcr .dynamic .got Dynamic section at offset 0xdd0 contains 25 entries: Tag Type Name/Value 0x0000000000000001 (NEEDED) Shared library: [libc.so.6] 0x000000000000000c (INIT) 0x630 0x000000000000000d (FINI) 0x944 0x0000000000000019 (INIT_ARRAY) 0x200db8 0x000000000000001b (INIT_ARRAYSZ) 8 (bytes) 0x000000000000001a (FINI_ARRAY) 0x200dc0 0x000000000000001c (FINI_ARRAYSZ) 8 (bytes) 0x0000000000000004 (HASH) 0x298 0x000000006ffffef5 (GNU_HASH) 0x2d8 0x0000000000000005 (STRTAB) 0x3e8 0x0000000000000006 (SYMTAB) 0x2f8 0x000000000000000a (STRSZ) 212 (bytes) 0x000000000000000b (SYMENT) 24 (bytes) 0x0000000000000015 (DEBUG) 0x0 0x0000000000000003 (PLTGOT) 0x200fa0 0x0000000000000007 (RELA) 0x510 0x0000000000000008 (RELASZ) 288 (bytes) 0x0000000000000009 (RELAENT) 24 (bytes) 0x0000000000000018 (BIND_NOW) 0x000000006ffffffb (FLAGS_1) Flags: NOW PIE 0x000000006ffffffe (VERNEED) 0x4d0 0x000000006fffffff (VERNEEDNUM) 1 0x000000006ffffff0 (VERSYM) 0x4bc 0x000000006ffffff9 (RELACOUNT) 3 0x0000000000000000 (NULL) 0x0 Relocation section '.rela.dyn' at offset 0x510 contains 12 entries: Offset Info Type Symbol's Value Symbol's Name + Addend 0000000000200db8 0000000000000008 R_X86_64_RELATIVE 790 0000000000200dc0 0000000000000008 R_X86_64_RELATIVE 750 0000000000201008 0000000000000008 R_X86_64_RELATIVE 201008 0000000000200fb8 0000000100000006 R_X86_64_GLOB_DAT 0000000000000000 __snprintf_chk@GLIBC_2.3.4 + 0 0000000000200fc0 0000000200000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_deregisterTMCloneTable + 0 0000000000200fc8 0000000300000006 R_X86_64_GLOB_DAT 0000000000000000 __stack_chk_fail@GLIBC_2.4 + 0 0000000000200fd0 0000000400000006 R_X86_64_GLOB_DAT 0000000000000000 __libc_start_main@GLIBC_2.2.5 + 0 0000000000200fd8 0000000500000006 R_X86_64_GLOB_DAT 0000000000000000 __gmon_start__ + 0 0000000000200fe0 0000000600000006 R_X86_64_GLOB_DAT 0000000000000000 __printf_chk@GLIBC_2.3.4 + 0 0000000000200fe8 0000000700000006 R_X86_64_GLOB_DAT 0000000000000000 _Jv_RegisterClasses + 0 0000000000200ff0 0000000800000006 R_X86_64_GLOB_DAT 0000000000000000 _ITM_registerTMCloneTable + 0 0000000000200ff8 0000000900000006 R_X86_64_GLOB_DAT 0000000000000000 __cxa_finalize@GLIBC_2.2.5 + 0 Symbol table '.dynsym' contains 10 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@GLIBC_2.3.4 (2) 2: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 3: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@GLIBC_2.4 (3) 4: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@GLIBC_2.2.5 (4) 5: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 6: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@GLIBC_2.3.4 (2) 7: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 8: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 9: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@GLIBC_2.2.5 (4) Symbol table '.symtab' contains 78 entries: Num: Value Size Type Bind Vis Ndx Name 0: 0000000000000000 0 NOTYPE LOCAL DEFAULT UND 1: 0000000000000238 0 SECTION LOCAL DEFAULT 1 2: 0000000000000254 0 SECTION LOCAL DEFAULT 2 3: 0000000000000274 0 SECTION LOCAL DEFAULT 3 4: 0000000000000298 0 SECTION LOCAL DEFAULT 4 5: 00000000000002d8 0 SECTION LOCAL DEFAULT 5 6: 00000000000002f8 0 SECTION LOCAL DEFAULT 6 7: 00000000000003e8 0 SECTION LOCAL DEFAULT 7 8: 00000000000004bc 0 SECTION LOCAL DEFAULT 8 9: 00000000000004d0 0 SECTION LOCAL DEFAULT 9 10: 0000000000000510 0 SECTION LOCAL DEFAULT 10 11: 0000000000000630 0 SECTION LOCAL DEFAULT 11 12: 0000000000000650 0 SECTION LOCAL DEFAULT 12 13: 0000000000000660 0 SECTION LOCAL DEFAULT 13 14: 0000000000000690 0 SECTION LOCAL DEFAULT 14 15: 0000000000000944 0 SECTION LOCAL DEFAULT 15 16: 0000000000000950 0 SECTION LOCAL DEFAULT 16 17: 0000000000000964 0 SECTION LOCAL DEFAULT 17 18: 00000000000009a0 0 SECTION LOCAL DEFAULT 18 19: 0000000000200db8 0 SECTION LOCAL DEFAULT 19 20: 0000000000200dc0 0 SECTION LOCAL DEFAULT 20 21: 0000000000200dc8 0 SECTION LOCAL DEFAULT 21 22: 0000000000200dd0 0 SECTION LOCAL DEFAULT 22 23: 0000000000200fa0 0 SECTION LOCAL DEFAULT 23 24: 0000000000201000 0 SECTION LOCAL DEFAULT 24 25: 0000000000201010 0 SECTION LOCAL DEFAULT 25 26: 0000000000000000 0 SECTION LOCAL DEFAULT 26 27: 0000000000000000 0 SECTION LOCAL DEFAULT 27 28: 0000000000000000 0 SECTION LOCAL DEFAULT 28 29: 0000000000000000 0 SECTION LOCAL DEFAULT 29 30: 0000000000000000 0 SECTION LOCAL DEFAULT 30 31: 0000000000000000 0 SECTION LOCAL DEFAULT 31 32: 0000000000000000 0 SECTION LOCAL DEFAULT 32 33: 0000000000000000 0 SECTION LOCAL DEFAULT 33 34: 0000000000000000 0 SECTION LOCAL DEFAULT 34 35: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 36: 0000000000200dc8 0 OBJECT LOCAL DEFAULT 21 __JCR_LIST__ 37: 00000000000006c0 0 FUNC LOCAL DEFAULT 14 deregister_tm_clones 38: 0000000000000700 0 FUNC LOCAL DEFAULT 14 register_tm_clones 39: 0000000000000750 0 FUNC LOCAL DEFAULT 14 __do_global_dtors_aux 40: 0000000000201010 1 OBJECT LOCAL DEFAULT 25 completed.6982 41: 0000000000200dc0 0 OBJECT LOCAL DEFAULT 20 __do_global_dtors_aux_fini_array_entry 42: 0000000000000790 0 FUNC LOCAL DEFAULT 14 frame_dummy 43: 0000000000200db8 0 OBJECT LOCAL DEFAULT 19 __frame_dummy_init_array_entry 44: 0000000000000000 0 FILE LOCAL DEFAULT ABS hello.c 45: 0000000000000000 0 FILE LOCAL DEFAULT ABS crtstuff.c 46: 0000000000000ab0 0 OBJECT LOCAL DEFAULT 18 __FRAME_END__ 47: 0000000000200dc8 0 OBJECT LOCAL DEFAULT 21 __JCR_END__ 48: 0000000000000000 0 FILE LOCAL DEFAULT ABS 49: 0000000000200dc0 0 NOTYPE LOCAL DEFAULT 19 __init_array_end 50: 0000000000200dd0 0 OBJECT LOCAL DEFAULT 22 _DYNAMIC 51: 0000000000200db8 0 NOTYPE LOCAL DEFAULT 19 __init_array_start 52: 0000000000000964 0 NOTYPE LOCAL DEFAULT 17 __GNU_EH_FRAME_HDR 53: 0000000000200fa0 0 OBJECT LOCAL DEFAULT 23 _GLOBAL_OFFSET_TABLE_ 54: 0000000000000940 2 FUNC GLOBAL DEFAULT 14 __libc_csu_fini 55: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __snprintf_chk@@GLIBC_2.3.4 56: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_deregisterTMCloneTable 57: 0000000000201000 0 NOTYPE WEAK DEFAULT 24 data_start 58: 0000000000201010 0 NOTYPE GLOBAL DEFAULT 24 _edata 59: 0000000000000944 0 FUNC GLOBAL DEFAULT 15 _fini 60: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __stack_chk_fail@@GLIBC_2.4 61: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __libc_start_main@@GLIBC_2.2.5 62: 0000000000201000 0 NOTYPE GLOBAL DEFAULT 24 __data_start 63: 0000000000000000 0 NOTYPE WEAK DEFAULT UND __gmon_start__ 64: 0000000000201008 0 OBJECT GLOBAL HIDDEN 24 __dso_handle 65: 00000000000007c0 126 FUNC GLOBAL DEFAULT 14 announcement 66: 0000000000000950 4 OBJECT GLOBAL DEFAULT 16 _IO_stdin_used 67: 00000000000008d0 101 FUNC GLOBAL DEFAULT 14 __libc_csu_init 68: 0000000000201018 0 NOTYPE GLOBAL DEFAULT 25 _end 69: 0000000000000690 42 FUNC GLOBAL DEFAULT 14 _start 70: 0000000000201010 0 NOTYPE GLOBAL DEFAULT 25 __bss_start 71: 0000000000000840 134 FUNC GLOBAL DEFAULT 14 main 72: 0000000000000000 0 FUNC GLOBAL DEFAULT UND __printf_chk@@GLIBC_2.3.4 73: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _Jv_RegisterClasses 74: 0000000000201010 0 OBJECT GLOBAL HIDDEN 24 __TMC_END__ 75: 0000000000000000 0 NOTYPE WEAK DEFAULT UND _ITM_registerTMCloneTable 76: 0000000000000000 0 FUNC WEAK DEFAULT UND __cxa_finalize@@GLIBC_2.2.5 77: 0000000000000630 0 FUNC GLOBAL DEFAULT 11 _init # Run twice to show off PIE, if available in kernel ../build-tree/wrapper-test-linked ../build-tree/wrapper-test-linked: ok (0x7fc80b85a7c0) ../build-tree/wrapper-test-linked ../build-tree/wrapper-test-linked: ok (0x7f86b64c57c0) # Check state of hardening features via check script perl ../build-tree/hardening-check ../build-tree/wrapper-test-linked ../build-tree/wrapper-test-linked: Position Independent Executable: yes Stack protected: yes Fortify Source functions: yes Read-only relocations: yes Immediate binding: yes # Manually check state of hardening features # Test PIE readelf -lW ../build-tree/wrapper-test-linked | grep '^Elf file type is DYN' Elf file type is DYN (Shared object file) # Test Stack Protector nm ../build-tree/wrapper-test-linked | egrep '__stack_chk_fail($|@@GLIBC)' U __stack_chk_fail@@GLIBC_2.4 # Test Fortify nm ../build-tree/wrapper-test-linked | egrep '__(sn)?printf_chk($|@@GLIBC)' U __printf_chk@@GLIBC_2.3.4 U __snprintf_chk@@GLIBC_2.3.4 # Test Format (no-op currently) # Test for RELRO readelf -lW ../build-tree/wrapper-test-linked | grep GNU_RELRO GNU_RELRO 0x000db8 0x0000000000200db8 0x0000000000200db8 0x000248 0x000248 R 0x1 # Test for BIND_NOW readelf -dW ../build-tree/wrapper-test-linked | grep BIND_NOW 0x0000000000000018 (BIND_NOW) # Build directly with -fPIC already defined ../build-tree/hardened-cc -B ../build-tree/ -fPIC -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-fPIC-direct hello.c /usr/bin/../lib/llvm-3.8/bin/clang -fstack-protector-strong -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -fPIC -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-fPIC-direct hello.c /usr/bin/x86_64-linux-gnu-ld.bfd -z relro -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-fPIC-direct /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0 -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../.. -L/usr/lib/llvm-3.8/bin/../lib -L/lib -L/usr/lib /tmp/hello-504fde.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crtn.o ../build-tree/wrapper-test-fPIC-direct ../build-tree/wrapper-test-fPIC-direct: ok (0x7fdbe39fc7c0) # Build .o with -fPIC already defined ../build-tree/hardened-cc -B ../build-tree/ -fPIC -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-fPIC.o -c hello.c /usr/bin/../lib/llvm-3.8/bin/clang -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -fPIC -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-fPIC.o -c hello.c # Link .o with -fPIC already defined ../build-tree/hardened-cc -B ../build-tree/ -fPIC -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-fPIC ../build-tree/wrapper-test-fPIC.o /usr/bin/../lib/llvm-3.8/bin/clang -fstack-protector-strong -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -fPIC -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-fPIC ../build-tree/wrapper-test-fPIC.o /usr/bin/x86_64-linux-gnu-ld.bfd -z relro -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-fPIC /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0 -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../.. -L/usr/lib/llvm-3.8/bin/../lib -L/lib -L/usr/lib ../build-tree/wrapper-test-fPIC.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crtn.o ../build-tree/wrapper-test-fPIC ../build-tree/wrapper-test-fPIC: ok (0x7f40f8e5e7c0) # Make sure build fails due to -Werror=format-security ! ../build-tree/hardened-cc -B ../build-tree/ -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-format-security format.c /usr/bin/../lib/llvm-3.8/bin/clang -fstack-protector-strong -fPIE -pie -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -B ../build-tree/ -g -O2 -fdebug-prefix-map=/<>/hardening-wrapper-2.8+nmu2=. -O2 -o ../build-tree/wrapper-test-format-security format.c /usr/bin/x86_64-linux-gnu-ld.bfd -z relro -z now -pie --hash-style=both --build-id --eh-frame-hdr -m elf_x86_64 -dynamic-linker /lib64/ld-linux-x86-64.so.2 -o ../build-tree/wrapper-test-format-security /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0 -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu -L/lib/x86_64-linux-gnu -L/lib/../lib64 -L/usr/lib/x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../.. -L/usr/lib/llvm-3.8/bin/../lib -L/lib -L/usr/lib /tmp/format-84d5c4.o -lgcc --as-needed -lgcc_s --no-as-needed -lc -lgcc --as-needed -lgcc_s --no-as-needed /usr/lib/gcc/x86_64-linux-gnu/6.2.0/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/6.2.0/../../../x86_64-linux-gnu/crtn.o Makefile.common:143: recipe for target '../build-tree/wrapper-test-format-security' failed make[3]: *** [../build-tree/wrapper-test-format-security] Error 1 make[3]: Leaving directory '/<>/hardening-wrapper-2.8+nmu2/tests' Makefile:6: recipe for target 'check' failed make[2]: *** [check] Error 2 make[2]: Leaving directory '/<>/hardening-wrapper-2.8+nmu2/tests' Makefile:43: recipe for target 'check' failed make[1]: *** [check] Error 2 make[1]: Leaving directory '/<>/hardening-wrapper-2.8+nmu2' dh_auto_test: make -j1 check returned exit code 2 debian/rules:10: recipe for target 'build-arch' failed make: *** [build-arch] Error 2 dpkg-buildpackage: error: debian/rules build-arch gave error exit status 2 -------------------------------------------------------------------------------- Build finished at 2016-08-29T17:08:27Z Finished -------- +------------------------------------------------------------------------------+ | Cleanup | +------------------------------------------------------------------------------+ Purging /<> Not cleaning session: cloned chroot in use E: Build failure (dpkg-buildpackage died) +------------------------------------------------------------------------------+ | Summary | +------------------------------------------------------------------------------+ Build Architecture: amd64 Build-Space: 0 Build-Time: 2 Distribution: unstable Fail-Stage: build Host Architecture: amd64 Install-Time: 7 Job: hardening-wrapper_2.8+nmu2 Machine Architecture: amd64 Package: hardening-wrapper Package-Time: 37 Source-Version: 2.8+nmu2 Space: 0 Status: failed Version: 2.8+nmu2 -------------------------------------------------------------------------------- Finished at 2016-08-29T17:08:27Z Build needed 00:00:00, 0k disc space E: Build failure (dpkg-buildpackage died) DC-Status: Failed 37.411394816s