nixpkgs/pkgs/build-support
Ryan Burns bd8258a389 cc-wrapper: ensure PIE flags precede PIC flags
fixes:
pkgsMusl.bulletml
pkgsMusl.proot
pkgsMusl.python3

Debian explains this issue well in the dpkg-buildflags manpage:

-fPIE
    Can be linked into any program, but not a shared library (recommended).
-fPIC
    Can be linked into any program and shared library.

On projects that build both programs and shared libraries you might need to
make sure that when building the shared libraries -fPIC is always passed last
(so that it overrides any previous -PIE) to compilation flags such as CFLAGS.

(from https://manpages.debian.org/bullseye/dpkg-dev/dpkg-buildflags.1.en.html#hardening)
2021-09-20 11:03:42 -07:00
..
add-opengl-runpath
agda treewide: runCommandNoCC -> runCommand 2021-08-15 17:36:41 +02:00
alternatives alternatives/blas: fix ILP64 check 2021-09-15 17:07:21 +02:00
appimage appimageTools.wrapAppImage: Fix passing arguments to wrapped executable 2021-07-01 17:16:10 -07:00
bintools-wrapper Merge master into staging-next 2021-07-25 06:01:27 +00:00
build-bazel-package buildBazelPackage: set fetchConfigured default to true 2021-06-07 02:04:01 +00:00
build-dotnet-package treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix 2021-01-19 01:16:25 -08:00
build-fhs-userenv buildFhsUserenv: inherit mounts from parent namespace 2021-09-01 18:37:54 -07:00
build-fhs-userenv-bubblewrap build-fhs-user-env-bubblewrap: add compatibility for pipewire alsa emulation 2021-07-10 12:50:52 +02:00
build-setupcfg
buildenv buildenv: fix regression introduced by #134215 2021-08-20 15:47:47 +03:00
cc-wrapper cc-wrapper: ensure PIE flags precede PIC flags 2021-09-20 11:03:42 -07:00
coq mkCoqDerivation: use COQMF_COQLIB for dev versions of Coq 2021-09-08 15:15:28 +02:00
docker dockerTools.usrBinEnv: add 2021-08-25 16:08:39 +02:00
dotnetbuildhelpers treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix 2021-01-19 01:16:25 -08:00
dotnetenv treewide: stdenv.lib -> lib 2021-01-24 01:49:49 +01:00
emacs elpa-packages: deprecate phases 2021-08-16 21:34:58 +02:00
expand-response-params responsie file logic 2021-02-09 09:46:47 +08:00
fetchbitbucket fetchFromBitbucket: remove hack for Mercurial 2021-02-08 17:54:12 +00:00
fetchbower
fetchbzr treewide: editorconfig fixes 2021-01-20 09:11:11 +10:00
fetchcvs fetchcvs: fix ssh wrapper failing due to missing /usr/bin/env 2021-02-08 19:18:17 +01:00
fetchdarcs
fetchdocker fix: fetchdocker call signature 2021-05-08 23:57:32 +02:00
fetchfirefoxaddon Merge pull request #106481 from tadfisher/patch-3 2021-01-30 22:31:24 +09:00
fetchfossil fetchfossil: Depend on cacert 2020-10-24 16:43:05 +05:30
fetchgit nix-prefetch-git: add fetchLFS flag to the JSON output 2021-08-28 10:14:48 +02:00
fetchgitea fetchFromGitea: init 2021-05-27 09:35:56 +02:00
fetchgithub fetchFromGitHub: also use git if deepClone or leaveDotGit is used 2020-12-21 13:20:04 +01:00
fetchgitiles
fetchgitlab fetchgitlab: add deepClone, fetchSubmodules, leaveDotGit arguments 2021-07-22 13:09:14 +02:00
fetchgitlocal
fetchgx fetchgx: deprecate phases 2021-08-20 23:47:21 +02:00
fetchhg treewide: stdenvNoCC.lib -> lib 2021-01-27 13:01:51 +07:00
fetchipfs
fetchmavenartifact treewide: stdenv.lib -> lib 2021-01-24 01:49:49 +01:00
fetchmtn treewide: stdenvNoCC.lib -> lib 2021-01-27 13:01:51 +07:00
fetchnuget treewide: unzip buildInputs to nativeBuildInputs (#112302) 2021-02-20 16:01:53 -05:00
fetchpatch
fetchrepoorcz
fetchrepoproject treewide: stdenvNoCC.lib -> lib 2021-01-27 13:01:51 +07:00
fetchs3 treewide: remove stdenv where not needed 2021-03-04 19:54:50 +07:00
fetchsavannah
fetchsourcehut fetchFromSourcehut: init 2021-03-08 15:51:24 +01:00
fetchsvn treewide: stdenvNoCC.lib -> lib 2021-01-27 13:01:51 +07:00
fetchsvnrevision pkgs/*: add final newline to .nix files 2020-11-09 11:39:28 +00:00
fetchsvnssh
fetchurl mirrors: get a second mirror for metalab 2021-08-23 20:47:58 +00:00
fetchzip fetchzip: recursively run chmod +w on the unpackDir 2021-09-08 03:58:18 +03:00
go garble: fix aarch64 build 2021-02-20 21:13:46 +10:00
icon-conv-tools application/development: /s/name/pname&version/ 2021-06-30 09:55:22 +02:00
install-shell-files Recover the complicated situation after my bad merge 2020-10-26 09:01:04 +01:00
kernel make-initrd: fix #132059 2021-08-08 07:53:59 +02:00
libredirect libredirect: add subprocess test 2021-09-03 23:45:46 +02:00
make-desktopitem build-support/make-desktopitem: add some missing fields 2021-06-04 17:48:46 +02:00
make-startupitem
make-symlinks
mkshell mkshell: small fix for #137005 (#137105) 2021-09-08 16:54:24 +02:00
mono-dll-fixer
nix-gitignore nix-gitignore: fix evaluation when .gitignore contains \# or \! (#130643) 2021-07-22 12:18:10 -04:00
nuget-to-nix treewide: runCommandNoCC -> runCommand 2021-08-15 17:36:41 +02:00
nuke-references nukeReferences: fix code signatures on aarch64-darwin 2021-05-17 00:27:03 +09:00
ocaml pkgsStatic.ocaml-ng: migrate static adapter to derivations themselves 2021-08-19 09:32:03 +02:00
oci-tools
pkg-config-wrapper pkg-config-wrapper: mangle PKG_CONFIG_PATH{,_FOR_BUILD} correctly 2021-05-18 00:13:27 +02:00
prefer-remote-fetch
references-by-popularity
release releaseTools: fix nixBuild function 2021-03-29 21:24:00 +02:00
remove-references-to removeReferencesTo: fix code signatures on aarch64-darwin 2021-05-17 00:27:03 +09:00
replace-secret replace-secret: deprecate phases 2021-08-17 09:59:37 +02:00
rust treewide: remove danieldk as maintainer from a set of packages 2021-09-12 14:42:12 +00:00
setup-hooks Merge master into staging-next 2021-09-15 00:01:33 +00:00
singularity-tools treewide: stdenv.lib -> lib 2021-01-24 01:49:49 +01:00
skaware s6-rc: fix cross builds that run s6-rc-compile 2021-08-18 20:09:19 +00:00
snap
src-only
substitute
substitute-files treewide: stdenv.lib -> lib 2021-01-24 01:49:49 +01:00
templaterpm nix-template-rpm: deprecate phases 2021-08-17 11:04:49 +02:00
trivial-builders trivial-builders: refactor writeTextFile to be overridable 2021-06-18 01:39:59 +02:00
upstream-updater
vm vm: deprecate phases 2021-08-20 23:31:26 +02:00
wrapper-common Merge pull request #123989 from Mic92/static-pie 2021-05-25 06:32:25 +01:00
writers writers: drop writeC 2021-08-25 20:16:31 +02:00
build-maven.nix
build-pecl.nix php: Run nixpkgs-fmt on all php related files 2021-06-26 20:07:56 +02:00
closure-info.nix
dhall-to-nix.nix dhallToNix: Permit inputs referring to derivations (#134459) 2021-08-21 19:25:01 -07:00
plugins.nix treewide: remove stdenv where not needed 2021-01-25 18:31:47 +01:00
replace-dependency.nix
setup-systemd-units.nix setupSystemdUnits: use /nix/var/nix/profiles/default/lib/systemd/system as fallback 2021-02-12 12:53:20 +01:00
source-from-head-fun.nix
trivial-builders.nix Merge pull request #133905 from raboof/buf-use-testVersion-utility 2021-08-18 11:59:49 +02:00