From nobody Fri Mar 20 19:17:54 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fcslt2VZxz6VwH1 for ; Fri, 20 Mar 2026 19:18:02 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-oa1-x2a.google.com (mail-oa1-x2a.google.com [IPv6:2001:4860:4864:20::2a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fcsls6gG4z3gpp for ; Fri, 20 Mar 2026 19:18:01 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Authentication-Results: mx1.freebsd.org; none Received: by mail-oa1-x2a.google.com with SMTP id 586e51a60fabf-41c096fab64so1197869fac.1 for ; Fri, 20 Mar 2026 12:18:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd.org; s=google; t=1774034276; x=1774639076; darn=freebsd.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=O2PGXHnTh8FATTVftUx2Bz0rh2aXcLQ5BzgH3dS0zrA=; b=Y7c0YWZMWQNcfvOXIGEM/0ei/eSbTp8VdgfIVmsqsEQYMgy4hd3xcepCGKLziw6k9I oLG37TYSM1L/Div1qdO4r7aLQ+cMI+M41O4Ge2ZiSJqgyE9is5U52WEcqa3useXES+nH QO/euoXqi8o3dunn927ZYnPCwdx/gF/fm50xT7EfQ23anPl69VO0fRu7BC6K9Ye746ko pWqqkHLsYXzVJMEY2wAUJhWOFkl8duF3T13Ow08OQdT8T4RldqPPTN+bfk8HP5Ek7w7u 6S+vN9dOA8E/ohSwhK/3YW1Wr6weJ0NLQ/3v0pOGAWaVsR2swawBGl3omD5bvFLFYgOE 1Vew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774034276; x=1774639076; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=O2PGXHnTh8FATTVftUx2Bz0rh2aXcLQ5BzgH3dS0zrA=; b=l8S6h8rwOzvnjeVGx48biNTNMaLZI6hoavghRlvm66mTmtkDxxsjF+w3+fWiqHg4dY qBe7Ck6k0Uq5T0aVzb/xF41NV1/LWJkMwIU1Gn3Lm7xiG/X0WpVdPfo2qpbYtN+aPjZR 2bnJM33N7mprfbpWzLU/BJ/KRGIwX+9V3IS2+/iQGIjWwcFTPNEeNX6P/lIl7qFiUZEu aE0adw/9JH2jmzFXYECXQCAkrHJAiB9uXqPMZfVbfZVERdEhj7+9bBqQANAMovzUmTed FBA6lzdFb7FwGEYsvP/oO/OUmosnqnWkQ/JCcYTBi6ONTKWTgJmnmhkbf0OJiVq7cXl4 xvEw== X-Forwarded-Encrypted: i=1; AJvYcCUP8LQ9WCggt7aPmaw/SdRrSEg2ClvoI0AjhJ9HZNveAIE6BhzTLI7dQuHACVckfEyKvJMkoheL89RSYz4EwW5mfrMT@freebsd.org X-Gm-Message-State: AOJu0YwfrJdgth8LMFfQTdbktZ2VbUwGFhw1gLT/ionxcXf7Zgv7kJ20 HtHN+76bBohLo3UtRsN8FWKiXSbQNeO08fBnoh4QcA23zbfwkjXMOuPFLKCNH/svpBCUAf9LFeC rBPtA X-Gm-Gg: ATEYQzzxVtoY9CEq8WRpJmcMpjq7B3BcswpxtpT9i6CnIQj6trtjZIYzXCGNHWJxuuN Z4+2NeLDUesUY8EwlwBInvZNx2LZBO+ioicUP0H2nKFexpRe2eKnGHJnnnxH3IWC5ho+wuaUyVN /LI52GGncT8EWgDW1S94Fe4NY6dFD4oXFLtyY/fAiiL2nr41nkt7QWj1pyqmmJ1LAFSUfTLp5E7 yjhM1WH3Q89vsFvyESDPEnPl6c7KnsCLdtMGFf6b1BDe/Q+gMH0CT+r7c0t0KyPFupV9nkBBRG+ YQ1PoM6XBveaHn5aVU7PKT0lUX+oK2iPMAaaHR2l6o7Ex70ve4D1Sdh7rDyZRSnyAccjlmGVsZh 3RaN0JRnOly/VrehmtirIL7JjmTB6BnwFQEnrHb4lbiMvhUcxSK0uADDz+iFFhbUJjz0cbprd9Q l/6kzI X-Received: by 2002:a05:6870:3926:b0:404:1843:e5bf with SMTP id 586e51a60fabf-41c1069ed82mr2468700fac.18.1774034275373; Fri, 20 Mar 2026 12:17:55 -0700 (PDT) Received: from mutt-hbsd ([2001:470:4001:1::95]) by smtp.gmail.com with ESMTPSA id 586e51a60fabf-41c1497485esm2963152fac.8.2026.03.20.12.17.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 20 Mar 2026 12:17:54 -0700 (PDT) Date: Fri, 20 Mar 2026 19:17:54 +0000 From: Shawn Webb To: A FreeBSD User Cc: Philip Paeps , Enji Cooper , src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: Re: git: 14b9955e57cc - main - libcrypto: compile all PIC objects with -DOPENSSL_PIC Message-ID: X-Operating-System: FreeBSD mutt-hbsd 15.0-STABLE-HBSD FreeBSD 15.0-STABLE-HBSD HARDENEDBSD amd64 X-PGP-Key: https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/blob/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc References: <69bc9a33.3bd51.5811996c@gitrepo.freebsd.org> <61743F2C-2561-4BAC-81F2-02B8A85B8755@freebsd.org> <20260320201441.333c83c0@thor.sb211.local> List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="sg2yvrxstjv7rl5w" Content-Disposition: inline In-Reply-To: <20260320201441.333c83c0@thor.sb211.local> X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2001:4860:4864::/48, country:US] X-Rspamd-Queue-Id: 4fcsls6gG4z3gpp X-Spamd-Bar: ---- --sg2yvrxstjv7rl5w Content-Type: text/plain; protected-headers=v1; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Subject: Re: git: 14b9955e57cc - main - libcrypto: compile all PIC objects with -DOPENSSL_PIC MIME-Version: 1.0 On Fri, Mar 20, 2026 at 08:14:14PM +0100, A FreeBSD User wrote: > Am Tage des Herren Fri, 20 Mar 2026 10:27:47 +0800 > Philip Paeps schrieb: >=20 > > On 2026-03-20 08:52:03 (+0800), Enji Cooper wrote: > >=20 > > > The branch main has been updated by ngie: > > > > > > URL:=20 > > > https://cgit.FreeBSD.org/src/commit/?id=3D14b9955e57cc28b61e785165b9e= ffcbe620edb46 > > > > > > commit 14b9955e57cc28b61e785165b9effcbe620edb46 > > > Author: Enji Cooper > > > AuthorDate: 2026-03-19 23:56:41 +0000 > > > Commit: Enji Cooper > > > CommitDate: 2026-03-20 00:51:51 +0000 > > > > > > libcrypto: compile all PIC objects with -DOPENSSL_PIC > > > > > > This change modifies the libcrypto PIC objects to always compile= =20 > > > with > > > `-DOPENSSL_PIC` to restore parity with the upstream build process= =2E=20 > > > This > > > ensures that `-DOPENSSL_PIC` is used whenever building the=20 > > > auxiliary > > > shared objects. In this case, just the legacy provider (we no=20 > > > longer > > > distribute the fips provider). > > > > > > MFC after: 2 weeks > > > Differential Revision: https://reviews.freebsd.org/D44896 =20 > >=20 > > This one seems to break the build for me: > >=20 > > main philip@flatulus:~/freebsd/src % time make -j 16 buildworld |grep= =20 > > error: > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > > '__stack_chk_guard'; recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32S cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32S cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: relocation R_X86_64_32 cannot be used against local symbol;= =20 > > recompile with -fPIC > > ld: error: too many errors emitted, stopping now (use --error-limit=3D0= to=20 > > see all errors) > > cc: error: linker command failed with exit code 1 (use -v to see=20 > > invocation) > > make -j 16 buildworld 63.51s user 16.69s system 593% cpu 13.524 total > > grep error: 0.01s user 0.01s system 0% cpu 13.524 total > >=20 > > Hm... as I type this I wonder if it's just META_MODE weirdness... > >=20 > > Philip > >=20 >=20 > Same here Appending to CFLAGS rather than PICFLAG resolves the issue. Commit in HardenedBSD coming soon. --=20 Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A= 4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc --sg2yvrxstjv7rl5w Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmm9nVsACgkQ/y5nonf4 4fpdCQ/9H9jWg0OUIN9DMdOAciTl8botGQ144HcYZXLQ0yQbF4cm+G5cRe2OC1Yz OJoSU9MFgWDh4LDypu8piqTiboH8HhilAsKZxlcYR176hlm5WQ5MfVYOPriGx9nk +DMuzAMP4wjhBn1qYZNAz6/LUVhcnF3cVgmgFSMGNBFOvKtJkN4Yp2WSTtWutVHC cSN1V83cwidLFu+Mqfh/nPuxj9+y34sbWJdZnjAJpko5m8Fe04cYzvpZdh5l+STK IpkF42xS8rYr+Ws5g0DEC+nora7M7Vkw8O/DPvd9mmeiSdVmS9qJ2eNCbeXGzMT4 O1HvAcc9T985Ce8watlVj6/3XTDxNkHhNtOsREqMpZIVk6jjE9c4OrrwlcAK/by5 PK5EkzUZNpe+FdmLwIB6W0+jLwGk8VbX8b0eRI2MSWFBh+n8MCROuVQWryjM3v9f O6VPPSf3huiR70YNsulGE6ABK0VuqpQNeWQ1Qh9XPr5rWHaTk6y6gg6gtJjuAt9F 6EV9E9ByKBbhzH0bZMyU32VYjmKPA9pyYPMOVZp1DUGtjCSGNpNGLudzaAPjcxBF 1ffeeISopQcy1FfCfAwChGLwKCBj02M6u0UshEbBCyOfA1lDNbQdQtV8zKdvBTVJ lTPe9fd4yHRsv2jKx/+IU7ci1RWIl1dweVCA3Vz/NHaUZb31hyk= =q9cZ -----END PGP SIGNATURE----- --sg2yvrxstjv7rl5w--