Date: Fri, 20 Mar 2026 19:17:54 +0000 From: Shawn Webb <shawn.webb@hardenedbsd.org> To: A FreeBSD User <freebsd@walstatt-de.de> Cc: Philip Paeps <philip@freebsd.org>, Enji Cooper <ngie@FreeBSD.org>, src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: Re: git: 14b9955e57cc - main - libcrypto: compile all PIC objects with -DOPENSSL_PIC Message-ID: <hpmgnwvygm5dvn5q6u7wu7xtqlocopdnoajr4mkou4q5yuypk7@yhn7cfwxc55k> In-Reply-To: <20260320201441.333c83c0@thor.sb211.local> References: <69bc9a33.3bd51.5811996c@gitrepo.freebsd.org> <61743F2C-2561-4BAC-81F2-02B8A85B8755@freebsd.org> <20260320201441.333c83c0@thor.sb211.local>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Fri, Mar 20, 2026 at 08:14:14PM +0100, A FreeBSD User wrote: > Am Tage des Herren Fri, 20 Mar 2026 10:27:47 +0800 > Philip Paeps <philip@freebsd.org> schrieb: > > > On 2026-03-20 08:52:03 (+0800), Enji Cooper wrote: > > > > > The branch main has been updated by ngie: > > > > > > URL: > > > https://cgit.FreeBSD.org/src/commit/?id=14b9955e57cc28b61e785165b9effcbe620edb46 > > > > > > commit 14b9955e57cc28b61e785165b9effcbe620edb46 > > > Author: Enji Cooper <ngie@FreeBSD.org> > > > AuthorDate: 2026-03-19 23:56:41 +0000 > > > Commit: Enji Cooper <ngie@FreeBSD.org> > > > CommitDate: 2026-03-20 00:51:51 +0000 > > > > > > libcrypto: compile all PIC objects with -DOPENSSL_PIC > > > > > > This change modifies the libcrypto PIC objects to always compile > > > with > > > `-DOPENSSL_PIC` to restore parity with the upstream build process. > > > This > > > ensures that `-DOPENSSL_PIC` is used whenever building the > > > auxiliary > > > shared objects. In this case, just the legacy provider (we no > > > longer > > > distribute the fips provider). > > > > > > MFC after: 2 weeks > > > Differential Revision: https://reviews.freebsd.org/D44896 > > > > This one seems to break the build for me: > > > > main philip@flatulus:~/freebsd/src % time make -j 16 buildworld |grep > > error: > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32S cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32S cannot be used against local symbol; > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol; > > recompile with -fPIC > > ld: error: too many errors emitted, stopping now (use --error-limit=0 to > > see all errors) > > cc: error: linker command failed with exit code 1 (use -v to see > > invocation) > > make -j 16 buildworld 63.51s user 16.69s system 593% cpu 13.524 total > > grep error: 0.01s user 0.01s system 0% cpu 13.524 total > > > > Hm... as I type this I wonder if it's just META_MODE weirdness... > > > > Philip > > > > Same here Appending to CFLAGS rather than PICFLAG resolves the issue. Commit in HardenedBSD coming soon. -- Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmm9nVsACgkQ/y5nonf4 4fpdCQ/9H9jWg0OUIN9DMdOAciTl8botGQ144HcYZXLQ0yQbF4cm+G5cRe2OC1Yz OJoSU9MFgWDh4LDypu8piqTiboH8HhilAsKZxlcYR176hlm5WQ5MfVYOPriGx9nk +DMuzAMP4wjhBn1qYZNAz6/LUVhcnF3cVgmgFSMGNBFOvKtJkN4Yp2WSTtWutVHC cSN1V83cwidLFu+Mqfh/nPuxj9+y34sbWJdZnjAJpko5m8Fe04cYzvpZdh5l+STK IpkF42xS8rYr+Ws5g0DEC+nora7M7Vkw8O/DPvd9mmeiSdVmS9qJ2eNCbeXGzMT4 O1HvAcc9T985Ce8watlVj6/3XTDxNkHhNtOsREqMpZIVk6jjE9c4OrrwlcAK/by5 PK5EkzUZNpe+FdmLwIB6W0+jLwGk8VbX8b0eRI2MSWFBh+n8MCROuVQWryjM3v9f O6VPPSf3huiR70YNsulGE6ABK0VuqpQNeWQ1Qh9XPr5rWHaTk6y6gg6gtJjuAt9F 6EV9E9ByKBbhzH0bZMyU32VYjmKPA9pyYPMOVZp1DUGtjCSGNpNGLudzaAPjcxBF 1ffeeISopQcy1FfCfAwChGLwKCBj02M6u0UshEbBCyOfA1lDNbQdQtV8zKdvBTVJ lTPe9fd4yHRsv2jKx/+IU7ci1RWIl1dweVCA3Vz/NHaUZb31hyk= =q9cZ -----END PGP SIGNATURE-----home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?hpmgnwvygm5dvn5q6u7wu7xtqlocopdnoajr4mkou4q5yuypk7>
