From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E77C51584AD for ; Tue, 15 Apr 2025 05:42:48 +0000 (UTC) Received: from lists.gentoo.org (bobolink.gentoo.org [140.211.166.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: relay-lists.gentoo.org@gentoo.org) by smtp.gentoo.org (Postfix) with ESMTPSA id CE7853430E0 for ; Tue, 15 Apr 2025 05:42:48 +0000 (UTC) Received: from bobolink.gentoo.org (localhost [127.0.0.1]) by bobolink.gentoo.org (Postfix) with ESMTP id C6EAF1104B0; Tue, 15 Apr 2025 05:42:47 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by bobolink.gentoo.org (Postfix) with ESMTPS id C09351104B0 for ; Tue, 15 Apr 2025 05:42:47 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 700143430A4 for ; Tue, 15 Apr 2025 05:42:47 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id C0447186A for ; Tue, 15 Apr 2025 05:42:45 +0000 (UTC) From: "Ionen Wolkens" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Ionen Wolkens" Message-ID: <1744695704.b2a26e9d7a8bb0a747e00ca1e28b5ad085eb9ae8.ionen@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: dev-qt/qtwebengine/ X-VCS-Repository: repo/gentoo X-VCS-Files: dev-qt/qtwebengine/qtwebengine-6.8.3.ebuild dev-qt/qtwebengine/qtwebengine-6.9.0-r1.ebuild dev-qt/qtwebengine/qtwebengine-6.9.9999.ebuild dev-qt/qtwebengine/qtwebengine-6.9999.ebuild X-VCS-Directories: dev-qt/qtwebengine/ X-VCS-Committer: ionen X-VCS-Committer-Name: Ionen Wolkens X-VCS-Revision: b2a26e9d7a8bb0a747e00ca1e28b5ad085eb9ae8 X-VCS-Branch: master Date: Tue, 15 Apr 2025 05:42:45 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: f5388385-9729-4de8-9d38-c227eb3a194e X-Archives-Hash: fe0ec6fae185277a78683a98c964bdd3 commit: b2a26e9d7a8bb0a747e00ca1e28b5ad085eb9ae8 Author: Ionen Wolkens gentoo org> AuthorDate: Tue Apr 15 05:31:05 2025 +0000 Commit: Ionen Wolkens gentoo org> CommitDate: Tue Apr 15 05:41:44 2025 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b2a26e9d dev-qt/qtwebengine: ensure execstack is disabled On second thought, think would rather ensure that this is disabled even if do not know how it happened in the first place, especially given chromium itself relies on noexecstack rather than notes, but then qtwebengine does not pass it for the final linking phase. Believe this is only an issue for qtwebengine with its multitude of asm files that may or may not be used, so not doing it in the eclass. Not revbumping given it seems to only happen in edge cases, but may as well get this done before stable 6.8.3 so that if glibc-2.41 is stabled later it'll ensure it's fine for them. Closes: https://bugs.gentoo.org/953111 Signed-off-by: Ionen Wolkens gentoo.org> dev-qt/qtwebengine/qtwebengine-6.8.3.ebuild | 4 ++++ dev-qt/qtwebengine/qtwebengine-6.9.0-r1.ebuild | 4 ++++ dev-qt/qtwebengine/qtwebengine-6.9.9999.ebuild | 4 ++++ dev-qt/qtwebengine/qtwebengine-6.9999.ebuild | 4 ++++ 4 files changed, 16 insertions(+) diff --git a/dev-qt/qtwebengine/qtwebengine-6.8.3.ebuild b/dev-qt/qtwebengine/qtwebengine-6.8.3.ebuild index 7b688a197a15..bab5e64ddb82 100644 --- a/dev-qt/qtwebengine/qtwebengine-6.8.3.ebuild +++ b/dev-qt/qtwebengine/qtwebengine-6.8.3.ebuild @@ -257,6 +257,10 @@ src_configure() { use arm64 && tc-is-gcc && filter-flags '-march=*' '-mcpu=*' fi + # chromium passes this by default, but qtwebengine does not and it may + # "possibly" get enabled by some paths and cause issues (bug #953111) + append-ldflags -Wl,-z,noexecstack + export NINJAFLAGS=$(get_NINJAOPTS) [[ ${NINJA_VERBOSE^^} == OFF ]] || NINJAFLAGS+=" -v" diff --git a/dev-qt/qtwebengine/qtwebengine-6.9.0-r1.ebuild b/dev-qt/qtwebengine/qtwebengine-6.9.0-r1.ebuild index d01308b28bb7..81125ccc89f3 100644 --- a/dev-qt/qtwebengine/qtwebengine-6.9.0-r1.ebuild +++ b/dev-qt/qtwebengine/qtwebengine-6.9.0-r1.ebuild @@ -255,6 +255,10 @@ src_configure() { use arm64 && tc-is-gcc && filter-flags '-march=*' '-mcpu=*' fi + # chromium passes this by default, but qtwebengine does not and it may + # "possibly" get enabled by some paths and cause issues (bug #953111) + append-ldflags -Wl,-z,noexecstack + export NINJAFLAGS=$(get_NINJAOPTS) [[ ${NINJA_VERBOSE^^} == OFF ]] || NINJAFLAGS+=" -v" diff --git a/dev-qt/qtwebengine/qtwebengine-6.9.9999.ebuild b/dev-qt/qtwebengine/qtwebengine-6.9.9999.ebuild index 210f80363379..05000f1cc1ad 100644 --- a/dev-qt/qtwebengine/qtwebengine-6.9.9999.ebuild +++ b/dev-qt/qtwebengine/qtwebengine-6.9.9999.ebuild @@ -253,6 +253,10 @@ src_configure() { use arm64 && tc-is-gcc && filter-flags '-march=*' '-mcpu=*' fi + # chromium passes this by default, but qtwebengine does not and it may + # "possibly" get enabled by some paths and cause issues (bug #953111) + append-ldflags -Wl,-z,noexecstack + export NINJAFLAGS=$(get_NINJAOPTS) [[ ${NINJA_VERBOSE^^} == OFF ]] || NINJAFLAGS+=" -v" diff --git a/dev-qt/qtwebengine/qtwebengine-6.9999.ebuild b/dev-qt/qtwebengine/qtwebengine-6.9999.ebuild index 1a65a1e73f68..e39783175f0f 100644 --- a/dev-qt/qtwebengine/qtwebengine-6.9999.ebuild +++ b/dev-qt/qtwebengine/qtwebengine-6.9999.ebuild @@ -251,6 +251,10 @@ src_configure() { use arm64 && tc-is-gcc && filter-flags '-march=*' '-mcpu=*' fi + # chromium passes this by default, but qtwebengine does not and it may + # "possibly" get enabled by some paths and cause issues (bug #953111) + append-ldflags -Wl,-z,noexecstack + export NINJAFLAGS=$(get_NINJAOPTS) [[ ${NINJA_VERBOSE^^} == OFF ]] || NINJAFLAGS+=" -v"