Your message dated Wed, 18 Feb 2026 08:36:23 +0000
with message-id <[email protected]>
and subject line Bug#1127747: fixed in binutils 2.46-2
has caused the Debian Bug report #1127747,
regarding binutils: Please build with -mbranch-protection=standard to enable
PAC/BTI/GCS on arm64
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1127747: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1127747
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: binutils
Version: 2.46-1
User: [email protected]
Usertags: pac-bti, gcs
Hi Matthias,
please consider the attached patch to build binutils with PAC/BTI/GCS
support. I have explicitly distinguished between CFLAGS and CXXFLAGS
because a user could choose to override them individually, for whatever
reasons.
After building the package with the patch, all ELF files get the
features enabled, see:
https://people.debian.org/~ema/binutils-gcs.txt
Building with DEB_BUILD_MAINT_OPTIONS=hardening=-branch, the flags are
not set as expected.
Other than a native build, I have also tested cross-building binutils on
a x86 system with `sbuild --host arm64` and that works fine too.
Thanks,
ema
>From c7efba8b4520196c0f2a26d4fd7ca13f071b3d20 Mon Sep 17 00:00:00 2001
From: Emanuele Rocca <[email protected]>
Date: Thu, 12 Feb 2026 10:55:46 +0100
Subject: [PATCH] Enable PAC/BTI/GCS on arm64
---
debian/changelog | 6 ++++++
debian/rules | 8 ++++++++
2 files changed, 14 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index f8ca1487..6e94fe51 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+binutils (2.46-2) UNRELEASED; urgency=medium
+
+ * Enable PAC/BTI/GCS on arm64.
+
+ -- Emanuele Rocca <[email protected]> Thu, 12 Feb 2026 10:55:09 +0100
+
binutils (2.46-1) unstable; urgency=medium
* binutils 2.46 release.
diff --git a/debian/rules b/debian/rules
index 47569018..909619a5 100755
--- a/debian/rules
+++ b/debian/rules
@@ -272,6 +272,14 @@ ifneq (,$(shell dpkg-buildflags | grep '^CFLAGS=.*-mbackchain'))
CFLAGS += -mbackchain
CXXFLAGS += -mbackchain
endif
+ifeq ($(DEB_HOST_ARCH),arm64)
+ ifneq (,$(findstring -mbranch-protection=standard,$(shell dpkg-buildflags --get CFLAGS)))
+ CFLAGS += -mbranch-protection=standard
+ endif
+ ifneq (,$(findstring -mbranch-protection=standard,$(shell dpkg-buildflags --get CXXFLAGS)))
+ CXXFLAGS += -mbranch-protection=standard
+ endif
+endif
STRIP = $(CROSS)strip -R .comment -R .note
STRIP_LTO = $(CROSS)strip -R .gnu.lto_* -R .gnu.debuglto_* -N __gnu_lto_slim -N __gnu_lto_v1
--
2.43.0
--- End Message ---
--- Begin Message ---
Source: binutils
Source-Version: 2.46-2
Done: Matthias Klose <[email protected]>
We believe that the bug you reported is fixed in the latest version of
binutils, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Matthias Klose <[email protected]> (supplier of updated binutils package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 18 Feb 2026 09:14:01 +0100
Source: binutils
Architecture: source
Version: 2.46-2
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <[email protected]>
Changed-By: Matthias Klose <[email protected]>
Closes: 1127603 1127604 1127747
Changes:
binutils (2.46-2) unstable; urgency=medium
.
* Enable PAC/BTI/GCS on arm64 (Emanuele Rocca). Closes: #1127747.
* Ignore ld-bootstrap/bootstrap.exp test failures everywhere.
Closes: #1127603.
* Don't run the ld-elf/sec64k.exp test on sh4, timing out. Closes: #1127604.
Checksums-Sha1:
7559397dd0f5dee22d3b304bb365a007b94ea8f3 11566 binutils_2.46-2.dsc
125f6c2d07100cb2941e9981ff4a8676ab8416f1 124164 binutils_2.46-2.debian.tar.xz
29cf659f670ea44c7d152bcdea7a452158b20a63 6665 binutils_2.46-2_source.buildinfo
Checksums-Sha256:
e6119f09d7716937a0fc42b704550883bdf15b416d86aa57ab5722de2ddd7aaf 11566
binutils_2.46-2.dsc
57371b8d74b6b814caef0502187a433eab25539fcc32caae72c5b9ae61f04221 124164
binutils_2.46-2.debian.tar.xz
34c18d450a72e53cf27d890c8c74ba28ef4fa8fce40c1b4f1dfb6f176cc235b1 6665
binutils_2.46-2_source.buildinfo
Files:
68e5e636c3edf2680c07df36c17716d2 11566 devel optional binutils_2.46-2.dsc
42364b0604689e0b4d445366c0662c02 124164 devel optional
binutils_2.46-2.debian.tar.xz
a2dade09557ab38365b932fca980b1e0 6665 devel optional
binutils_2.46-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=YFkm
-----END PGP SIGNATURE-----
pgpNG64UyhPS2.pgp
Description: PGP signature
--- End Message ---
