Re: gnutls vs. PAX MPROTECT on i386-current?

["John D. Baker" <jdbaker%mylinuxisp.com@localhost>]

On Tue, 29 Nov 2016, Joerg Sonnenberger wrote:

> > > /usr/pkg/lib/libgnutls.so.30: text relocations
> > > /usr/pkg/lib/libgnutls.so.30: Cannot write-enable text segment: Permission denied
> 
> Please figure out exactly where the text relocations are. I would
> suspect some badly written assembly ignoring the PIC requirements, but
> it would be good to make sure... -Wl,--warn-shared-textrel can help.

I've added this to CFLAGS, CXXFLAGS and directly to the make targets
for the cups 'genstrings' and 'mantohtml' utilities.  Nothing shows up
at compile/link time.  The above warnings/errors only appear at run
time.

I've rebuilt python, glib2, and gnutls with these addtional flags and
none have produced any extra diagnostics.

I did notice that there appear to be some custom assembler for some
crypto routines in gnutls as evidenced by the "CCAS" in the make output.

-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]mylinuxisp[flyspeck]com    OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645