Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

imx-digi-base: disable GCCPIE by default 

This option configures gcc to use PIE by default, which is good from a security
standpoint. However, the files necessary to compile applications statically
with PIE support are missing from glibc, causing builds to fail. Said files
were removed on purpose in poky commit 472c86127ab57759588e5ec53c75ebb52667f094
because static PIE binaries apparently don't work very well when using gcc 7.x.

Instead of enabling static PIE support for glibc and risking runtime failures,
revert to our old situation and remove default PIE suport for gcc.

https://jira.digi.com/browse/DEL-6558

Signed-off-by: Gabriel Valcazar <gabriel.valcazar@digi.com>
This commit is contained in:
Gabriel Valcazar 2019-04-15 11:22:45 +02:00
parent b81da5f6d0
commit e4cbeafa1c
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
meta-digi-arm/conf/machine/include/imx-digi-base.inc
View File

@ -116,3 +116,7 @@ MACHINEOVERRIDES =. "imx:"
# U-Boot 2017.X requires a specific dtc version.
PREFERRED_VERSION_dtc-native_mx6 ?= "1.4.5"
PREFERRED_VERSION_nativesdk-dtc_mx6 ?= "1.4.5"
# Don't add default PIE support to gcc, since static PIE executables don't work
# very well with gcc 7.x and the glibc we use isn't configured to support them.
GCCPIE ?= ""