From nobody Fri Mar 20 19:22:33 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fcssC3wtPz6Vww5 for ; Fri, 20 Mar 2026 19:22:39 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-oa1-x2e.google.com (mail-oa1-x2e.google.com [IPv6:2001:4860:4864:20::2e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fcssC0wG7z3j5R for ; Fri, 20 Mar 2026 19:22:39 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Authentication-Results: mx1.freebsd.org; none Received: by mail-oa1-x2e.google.com with SMTP id 586e51a60fabf-404254ffe8aso1578924fac.0 for ; Fri, 20 Mar 2026 12:22:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd.org; s=google; t=1774034553; x=1774639353; darn=freebsd.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=E29tLVDa3PxxIh6ggGMXtuZeOUFVEzefBciluIQifgw=; b=fWl8KgM7d17XnNPP4flcArA/AcQgelx0cjUIJQkttHRhoewXQ3Nna/E0W/lPNNQ0YV f1lirv6zqDAg0F+4jv/DWGm2WlTb1rvgV7xbRE/LuHcyirhYlo+KWRVA+CBizV5NEwTQ FPPtQKhuYxuWtF+INYRfF5+RL2pI6OsbTjKCnbpNcshn+MUT5ZPebnQTjHCba2r7CAfS yOFKGuzATKNNgOAQEHUdB2EydKcdlVeoiy+8yYP36ACAuixfippX4ZV5SilCZ2bUUT1W z4FsCz1CpvOaJYRzIZBiqWjMaT0z7nmN1OpISBd9DGMF9esk/d1l4rbk2Tp6z97+Z6OG +fpA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774034553; x=1774639353; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=E29tLVDa3PxxIh6ggGMXtuZeOUFVEzefBciluIQifgw=; b=AkqGcE9I5Ii+tMjy+kx8RtaE5xDw6Rclch29ekhoOjMf4islY9VJ9Q4JFX/22JN5bb YECPx51pHJ54Z/7nXLqfQburmYo+o64g2kGQwcb6d/qVYM5hQsHWyRy5y8pdaJq33MKD 4ZeXDMIbG+wodOsDvjKfzm1hxbBvguHBHMosmt1df2VDcguYnKZ7BOt/Tbf4MDvmKelf LSBoR/rsiqutVHQ8seTrRR86r9a46ZgWZBsA00DtfwAvSp3vEFeTJRGd3eKPvfXBDTJF ML/b1qTSxteT8XbnQtbWd+OyFLw6+iOtWyjPFDfSg8KiGQZT4gKhwCySPAwcuMC/womX MJ3A== X-Forwarded-Encrypted: i=1; AJvYcCWkmw7+1228BISfIcFXIpOdmKU8jHEsly47HoX01aL7UCvyQbHa6DKm7XbB5n3xbdnwdY4jlCkzXLAb/IrL59oZX8Th@freebsd.org X-Gm-Message-State: AOJu0YwOy3Ub8tkzVrpx6zlayoaiitpbOSmNcZ9WCDuI9ywifqIa6in0 i2AplSyibtByHkAXRckyyjtWboID/RqU/brh7cPl2lZzeT8ee6mkSSpbmJKzQ+tizWc= X-Gm-Gg: ATEYQzxoa379CkkEAQWBnGF0ZdSuFzf7ibMx4pPvsVMwuS6p69VvfMQJdhgtFvboDoc fcNt3Ts5slQsuHNvgoiJAvtciqUfriSTJRabHrArWR3R07QyyjCM3hQGGvf7WcIu/buEom1vjwn 95jAGOWINy4QeF4/xGAnHMprZ2s0PfLMPC8/OS8XGNilYDs2Kou9815ihyOgAotNXfNE6apDn+v MU5xe9BW40TqZj2Rh7lnIHk2SbkR0fYeED8O6bsvUCNZJGTamPBBT0UdFWkFppcl35Psuly5I1h F2kA0YhtF5e1JeVMz4WWKMG+fsiT5n5NkQy3a4NVlkhwItjKtktIQy1/Q+bD4PUf2f9kP5MHnrd LOvTzcOTHjsIsxnbOR17zkIQT2WwhS7LwG/mGbWWHZ9IL4qxFluWksc//igtgAs1R0Fguw7qTY6 tmB/vS X-Received: by 2002:a05:6870:b0cb:b0:417:b523:bd03 with SMTP id 586e51a60fabf-41c10445487mr2524875fac.9.1774034553146; Fri, 20 Mar 2026 12:22:33 -0700 (PDT) Received: from mutt-hbsd ([2001:470:4001:1::95]) by smtp.gmail.com with ESMTPSA id 586e51a60fabf-41c14d64fbbsm2424710fac.9.2026.03.20.12.22.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 20 Mar 2026 12:22:32 -0700 (PDT) Date: Fri, 20 Mar 2026 19:22:33 +0000 From: Shawn Webb To: Jessica Clarke Cc: A FreeBSD User , Philip Paeps , Enji Cooper , "src-committers@freebsd.org" , "dev-commits-src-all@freebsd.org" , "dev-commits-src-main@freebsd.org" Subject: Re: git: 14b9955e57cc - main - libcrypto: compile all PIC objects with -DOPENSSL_PIC Message-ID: X-Operating-System: FreeBSD mutt-hbsd 15.0-STABLE-HBSD FreeBSD 15.0-STABLE-HBSD HARDENEDBSD amd64 X-PGP-Key: https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/blob/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc References: <69bc9a33.3bd51.5811996c@gitrepo.freebsd.org> <61743F2C-2561-4BAC-81F2-02B8A85B8755@freebsd.org> <20260320201441.333c83c0@thor.sb211.local> <6E6DB2FA-3E78-40B6-BFDB-2BDD240C5CED@freebsd.org> List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="73h4wprsfjoi2yto" Content-Disposition: inline In-Reply-To: <6E6DB2FA-3E78-40B6-BFDB-2BDD240C5CED@freebsd.org> X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2001:4860:4864::/48, country:US] X-Rspamd-Queue-Id: 4fcssC0wG7z3j5R X-Spamd-Bar: ---- --73h4wprsfjoi2yto Content-Type: text/plain; protected-headers=v1; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Subject: Re: git: 14b9955e57cc - main - libcrypto: compile all PIC objects with -DOPENSSL_PIC MIME-Version: 1.0 On Fri, Mar 20, 2026 at 07:21:11PM +0000, Jessica Clarke wrote: > On 20 Mar 2026, at 19:17, Shawn Webb wrote: >=20 > > On Fri, Mar 20, 2026 at 08:14:14PM +0100, A FreeBSD User wrote: > >> Am Tage des Herren Fri, 20 Mar 2026 10:27:47 +0800 > >> Philip Paeps schrieb: > >>=20 > >>> On 2026-03-20 08:52:03 (+0800), Enji Cooper wrote: > >>>=20 > >>>> The branch main has been updated by ngie: > >>>>=20 > >>>> URL:=20 > >>>> https://cgit.FreeBSD.org/src/commit/?id=3D14b9955e57cc28b61e785165b9= effcbe620edb46 > >>>>=20 > >>>> commit 14b9955e57cc28b61e785165b9effcbe620edb46 > >>>> Author: Enji Cooper > >>>> AuthorDate: 2026-03-19 23:56:41 +0000 > >>>> Commit: Enji Cooper > >>>> CommitDate: 2026-03-20 00:51:51 +0000 > >>>>=20 > >>>> libcrypto: compile all PIC objects with -DOPENSSL_PIC > >>>>=20 > >>>> This change modifies the libcrypto PIC objects to always compile= =20 > >>>> with > >>>> `-DOPENSSL_PIC` to restore parity with the upstream build process= =2E=20 > >>>> This > >>>> ensures that `-DOPENSSL_PIC` is used whenever building the=20 > >>>> auxiliary > >>>> shared objects. In this case, just the legacy provider (we no=20 > >>>> longer > >>>> distribute the fips provider). > >>>>=20 > >>>> MFC after: 2 weeks > >>>> Differential Revision: https://reviews.freebsd.org/D44896 =20 > >>>=20 > >>> This one seems to break the build for me: > >>>=20 > >>> main philip@flatulus:~/freebsd/src % time make -j 16 buildworld |grep= =20 > >>> error: > >>> ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > >>> '__stack_chk_guard'; recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > >>> '__stack_chk_guard'; recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > >>> '__stack_chk_guard'; recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > >>> '__stack_chk_guard'; recompile with -fPIC > >>> ld: error: relocation R_X86_64_PC32 cannot be used against symbol=20 > >>> '__stack_chk_guard'; recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32S cannot be used against local symbo= l;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32S cannot be used against local symbo= l;=20 > >>> recompile with -fPIC > >>> ld: error: relocation R_X86_64_32 cannot be used against local symbol= ;=20 > >>> recompile with -fPIC > >>> ld: error: too many errors emitted, stopping now (use --error-limit= =3D0 to=20 > >>> see all errors) > >>> cc: error: linker command failed with exit code 1 (use -v to see=20 > >>> invocation) > >>> make -j 16 buildworld 63.51s user 16.69s system 593% cpu 13.524 total > >>> grep error: 0.01s user 0.01s system 0% cpu 13.524 total > >>>=20 > >>> Hm... as I type this I wonder if it's just META_MODE weirdness... > >>>=20 > >>> Philip > >>>=20 > >>=20 > >> Same here > >=20 > > Appending to CFLAGS rather than PICFLAG resolves the issue. Commit in > > HardenedBSD coming soon. >=20 > Yeah that=E2=80=99ll stop the PICFLAG?=3D-fpic from doing anything. >=20 > CFLAGS is wrong though, you want SHARED_CFLAGS, I imagine. Good catch on the SHARED_CFLAGS. I'll give that a try. --=20 Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A= 4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc --73h4wprsfjoi2yto Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmm9nnkACgkQ/y5nonf4 4fqtBw//fxF5XAUwijmNae5syt9cac8Db1IP68en3rA+bCP+55g6kHQo2czjIT3U jGVeSaBEkNYOJ3wZUf0MC6YvI0TMY2AcQdxFCqaOUGUsD8AWT6vNDynvUyOOhmOp C/0ssz+g74mXe6xFxtOThbHQjN7QcMHrEjhcgo0S9s3ZdZIvnFuQV64/XiVOsB60 W/d3PL3KIWxzDppAqsxY8E9hwODQKb+nplb4pG2kNAgDBPS+sGdQUqSO2/jbvGmN lVIu6jXdmZZBZ3wzazZ7gvBAgU5ZF7h123Pg+sKJet94gWEpBuEow+N0bB/+rjib PZIcyn5r+e5v19TswHBoKAw2/BDN0SoTy0k20nt3ZELTK1lizni7XexijloSgD+3 9DXDiCnjdo7lGsuHCkV1npJ7rVUD1e2saJawHyNwfK2cVEYHhlpyF1UQu11nDzFb sbfkx7zjPVLbj5RlVjy6S1N5H5vjL/E3KmKvzYDftT5zTsHaH7u2tjEdJD6MVimH i2PQKxXeISLnvPulUws+/Mbqg/1XLUvTgo2s7FDwGb+Eq/znywYnuTqzd3CRTcUZ KYRvf26TgyPHl2h8k9t4qwvYePXdwtkd4RN10Ne5wnHtjWjhgxUH0qfPt2U9boYw QxOfBNmbzQGSuCBV7fSbx/QIKNU+9eh0sj4HbDU95c57lnghmUY= =kEWj -----END PGP SIGNATURE----- --73h4wprsfjoi2yto--