15584 2024-08-29 13:46:26 +0000 Audit use of -fPIE in -native libraries 2026-02-10 19:23:18 +0000 1 1 7 Build System, Metadata & Runtime OE-Core devtools / tool chain 5.99 x86 Multiple RESOLVED OBSOLETE Medium normal 5.99 1 randy.macleod unassigned meta.mr.watcher meta.watcher raj.khem sundeep.kokkonda --- --- Don't know oldest_to_newest 99582 0 randy.macleod 2024-08-29 13:46:26 +0000 When updating Rust to 1.78, a problem was found on an alma9 build (1) that appears to be due to libz.a being compiled without -fPIE. A patch has been sent to fix that issue (2). Are there other static or shared libraries that are not using -fPIE and if so, should we require and test that all -native objects are using -fPIE? 1) https://lists.openembedded.org/g/openembedded-core/message/203837?p=%2C%2C%2C20%2C0%2C0%2C0%3A%3ACreated%2C%2Crust%3A+Upgrade+1.78.0-%3E1.79.0%2C20%2C1%2C0%2C108090372 2) https://lists.openembedded.org/g/openembedded-core/message/203882?p=%2C%2C%2C20%2C0%2C0%2C0%3A%3Acreated%2C%2Crust%3A+Upgrade+1.78.0-%3E1.79.0%2C20%2C2%2C0%2C108090372 99584 1 randy.macleod 2024-08-29 14:40:17 +0000 Apparently you can't just add -fPIE everywhere as on override since things will break in weird and wonderful ways. Khem, Do you have any words of wisdom to share? 104223 2 randy.macleod 2026-02-10 19:23:18 +0000 This is a very general concern and it seems that we can't apply a generic rule for -native code so closing the bug. If there is a specific problem related to lack of: -fPIE for -native code, please open a new bug.