Your message dated Wed, 30 Aug 2023 10:50:20 +0000
with message-id <e1qbimc-00ewgw...@fasolo.debian.org>
and subject line Bug#1021292: fixed in dpkg 1.22.0
has caused the Debian Bug report #1021292,
regarding dpkg-buildflags: Please add support for pointer authentication on
arm64
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1021292: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021292
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dpkg-dev
Version: 1.19.7
Severity: wishlist
Tags: patch
As discussed in the below-linked thread on dpkg-dev, we should enable PAC and
BTI
on arm64 as a standard hardening flag.
https://lists.debian.org/debian-dpkg/2022/05/msg00022.html
Attached is Guillem's proposed patch which does the trick, updated for
current dpkg (I opened this bug file in June, but forgot to actually
press send, so now updated for the current 1.21.9)
Despite this delay, I hope we can can have this in for bookworm.
--
Wookey
diff -Nru dpkg-1.21.9/debian/changelog dpkg-1.21.9+1/debian/changelog
--- dpkg-1.21.9/debian/changelog 2022-07-01 09:25:58.000000000 +0000
+++ dpkg-1.21.9+1/debian/changelog 2022-10-04 15:28:43.000000000 +0000
@@ -1,3 +1,9 @@
+dpkg (1.21.9+1) unstable; urgency=medium
+
+ * Add 'branch' hardening support for amd64 and arm64
+
+ -- Wookey <woo...@debian.org> Tue, 04 Oct 2022 16:28:43 +0100
+
dpkg (1.21.9) unstable; urgency=medium
[ Guillem Jover ]
diff -Nru dpkg-1.21.9/scripts/Dpkg/Vendor/Debian.pm
dpkg-1.21.9+1/scripts/Dpkg/Vendor/Debian.pm
--- dpkg-1.21.9/scripts/Dpkg/Vendor/Debian.pm 2022-06-30 23:46:56.000000000
+0000
+++ dpkg-1.21.9+1/scripts/Dpkg/Vendor/Debian.pm 2022-10-04 15:13:28.000000000
+0000
@@ -129,6 +129,7 @@
format => 1,
relro => 1,
bindnow => 0,
+ branch => 1,
},
);
@@ -364,6 +365,11 @@
# relro not implemented on ia64, hppa, avr32.
$use_feature{hardening}{relro} = 0;
}
+ if ($cpu !~ /^(?:amd64|arm64)$/) {
+ # On amd64 use -fcf-protection.
+ # On arm64 use -mbranch-protection=standard.
+ $use_feature{hardening}{branch} = 0;
+ }
# Mask features that might be influenced by other flags.
if ($opts_build->has('noopt')) {
@@ -430,6 +436,17 @@
$flags->append('LDFLAGS', '-Wl,-z,now');
}
+ # Branch protection
+ if ($use_feature{hardening}{branch}) {
+ my $flag;
+ if ($cpu eq 'arm64') {
+ $flag = '-mbranch-protection=standard';
+ } elsif ($cpu eq 'amd64') {
+ $flag = '-fcf-protection';
+ }
+ $flags->append($_, $flag) foreach @compile_flags;
+ }
+
## Commit
# Set used features to their builtin setting if unset.
diff -Nru dpkg-1.21.9/scripts/t/Dpkg_BuildFlags.t
dpkg-1.21.9+1/scripts/t/Dpkg_BuildFlags.t
--- dpkg-1.21.9/scripts/t/Dpkg_BuildFlags.t 2022-06-18 17:57:44.000000000
+0000
+++ dpkg-1.21.9+1/scripts/t/Dpkg_BuildFlags.t 2022-10-04 15:28:06.000000000
+0000
@@ -55,6 +55,7 @@
) ],
hardening => [ qw(
bindnow
+ branch
format
fortify
pie
--- End Message ---
--- Begin Message ---
Source: dpkg
Source-Version: 1.22.0
Done: Guillem Jover <guil...@debian.org>
We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1021...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guillem Jover <guil...@debian.org> (supplier of updated dpkg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 30 Aug 2023 05:39:24 +0200
Source: dpkg
Architecture: source
Version: 1.22.0
Distribution: unstable
Urgency: medium
Maintainer: Dpkg Developers <debian-d...@lists.debian.org>
Changed-By: Guillem Jover <guil...@debian.org>
Closes: 902856 918914 1021292 1023753 1028296 1028654 1030149 1030159 1030271
1030660 1032562 1034466 1036865 1038121 1038888 1040869 1041730
Changes:
dpkg (1.22.0) unstable; urgency=medium
.
[ Guillem Jover ]
* dpkg: Do not reset the line number for each --command-fd parsed command.
* dselect: Add non-free-firmware archive area support.
* dselect: Relicense ftp method from GPL-2 to GPL-2+.
* dpkg-deb: Do not print trailing spaces in --info output.
* dpkg: Clarify that commands can take package-name or --pending in error
message. Closes: #1034466
* Remove avr32, m32r and tilegx obsolete architectures.
See Linux commit 26202873bb51fafdaa51be3e8de7aab9beb49f70 (avr32).
See Linux commit 553b085c2075f6a4a2591108554f830fa61e881f (m32r).
See Linux commit bb9d812643d8a121df7d614a2b9c60193a92deb0 (tile).
* dpkg-db-keeper: Add helper script to assist with tracking database changes.
* dpkg-buildpackage: Add support for new preinit hook. Closes: #1023753
* dselect: Remove handling of .GZ, .Z and .z compressed Package files.
* dselect: Fix stdout+stderr discarding redirection in ftp method.
Prompted by shellcheck.
* dpkg-buildpackage: Fix build hook action substitution string handling.
* dpkg-buildpackage: Set the hook options in an environment variable.
Closes: #902856
* dpkg-buildpackage: Set DPKG_BUILDPACKAGE_HOOK_NAME envvar for hooks.
* dpkg-buildpackage: Handle missing information for hook substitutions.
* dpkg-deb: Fix short lived memory leak after fork().
* Switch from pkg-config to pkgconf.
* dpkg: Handle non-existent .dpkg-tmp files on read-only filesystems.
Closes: #1030149
* dpkg-buildpackage: Fix R³ namespace check to only refuse unknown dpkg
keywords. Closes: #1036865
* dpkg-buildapi: New tool to fetch the dpkg-build-api level.
* dpkg-shlibdeps: On dpkg-build-api >= 1 require -l instead of
LD_LIBRARY_PATH.
* dpkg-buildpackage: On dpkg-build-api >= 1 default R³ to no.
* dpkg-buildpackage: On dpkg-build-api >= 1 avoid build target heuristics.
* Mark dpkg-build-api level 1 as stable.
* Architecture support:
- Restore "arch: Add support for loong64 CPU". Closes: #1028654
* Perl modules:
- Dpkg::OpenPGP::ErrorCodes: Add new OPENPGP_CMD_CANNOT_SIGN error code.
- Dpkg::OpenPGP::Backend::GnuPG: On signing failure use
OPENPGP_CMD_CANNOT_SIGN. Closes: #1030271
- Dpkg::Shlibs::Objdump::Object: Split from Dpkg::Shlibs::Objdump.
- Dpkg::Control::HashCore::Tie: Split from Dpkg::Control::HashCore.
- Dpkg::Vars: Fold into Dpkg::Package.
- Dpkg::Package: Rename source_package symbols to source_name.
- Dpkg::Changelog::Parse: Fix indentation of copyright and license notice.
- Dpkg::Version: Update POD for removed semantic_change::overload::bool
warning.
- Dpkg::Gettext: Relicense from BSD-2 to GPL-2+.
- Dpkg::Source::Archive: Fix file normalization for relative pathnames.
- Dpkg::Source::Archive: Reflow regex match in _add_entry().
- Dpkg::Control::FieldsCore: Deprecate implicit field_transfer_single()
argument.
- Dselect::Method::Ftp: Rename from Dselect::Ftp.
- Dselect::Method::Ftp: Modify config and site subs towards method
independence.
- Dselect::Method: Move to be generic functions from Dselect::Ftp.
- Dselect::Method::Ftp: Update package name.
- Dpkg::Vendor::Debian: Add time64 feature in the future area.
Based on a patch by Helge Deller <del...@gmx.de>. Closes: #1030159
- Dpkg::Control::HashCore::Tie: Rename $last to $prev.
- Dpkg::Substvars: Handle exponential expansion gracefully.
- Dpkg::Shlibs::Objdump: Remove unsupported ELF machine types.
- Dpkg::Shlibs::Objdump: Add ELF machine types for all supported arches.
- Dpkg::Shlibs::Objdump: Add RISC-V ELF ABI tracking.
- Dpkg::Shlibs::Objdump: Add OR1K ELF ABI tracking.
- Dpkg::Shlibs::Objdump: Switch get_format() to return a colon-separated
string.
- Dpkg::Shlibs::Objdump: Add back the ARM ABI mismatch mask but commented
out. See #853793.
- Dpkg::Source::Quilt: Switch get_db_file() to be based off get_db_dir().
- Dpkg::Vendor::Debian: Mark PIE as builtin on hurd-amd64.
- Dpkg::Vendor::Debian: Only use ABI bits to suppress LFS or time64
features.
- Dpkg::Vendor::Debian: Only enable LFS when time64 is enabled for glibc.
- Dpkg::Vendor::Debian: Invert time64 suppression list logic.
- Dpkg::Vendor::Debian: Ignore musl libc systems for time64 suppression.
- Dpkg::Vendor::Debian: Add fallback values for ABI attributes.
- Dpkg::Source::Package::V2: Mark single-debian-patch as not needing
forwarding. Closes: #1038121
- Dpkg::Vendor::Debian: Sync builtin pie arches with gcc-13.
- Dpkg::Vendor::Debian: Move time64 buildflags feature from future to abi.
Suggested by Steve Langasek <vor...@debian.org>.
- Dpkg::Vendor::Debian: Move lfs from future to abi area and create an
alias. Suggested by Steve Langasek <vor...@debian.org>.
- Dpkg::Vendor::Debian: Move builtin default setup before
init_build_features().
- Dpkg::Vendor::Debian: Handle abi feature flags as builtin.
- Dpkg::Vendor::Debian: Add support for new hardening branch feature.
Closes: #1021292
- Dpkg::Vendor::Debian: Add support for new stackclash hardening feature.
Closes: #918914
- Dpkg::Source::Quilt: Switch get_patch_file() to be based off
get_patch_dir().
- Dpkg::BuildAPI: New module.
* Make fragments:
- Add new buildapi.mk support.
- On dpkg-build-api >= 1 default to dpkg_vendor_derives_from_v1.
- On dpkg-build-api >= 1 include buildtools.mk in default.mk.
* Documentation:
- man: Add notes about reproducibility properties for path fixing build
features. Prompted by Sven Joachim <svenj...@gmx.de>.
- man: Itemize remaining lists.
- man: Unify admonition markup and formatting.
- man: Move shell redirection operator close to the redirected file.
- man: Add versions where build flag features were added.
- doc: Update triggers spec.
- man: Fix OpenPGP backends list in dpkg-buildpackage(1).
- doc: Use «honor» and «behavior» uniformly in documentation and output.
- man: Clarify that dpkg-reconfigure is part of the debconf project.
- doc: Add a Status field to frontend-api spec.
- man: Clarify shared library name formats and their purpose.
- man: Add SECURITY sections.
- man: Spell out «manual page».
- man: Clarify C.UTF-8 locale setting hint. Closes: #1028296
- man: Update methods provided by dselect(1).
- man: Turn buildinfo filename format selection into a list.
- man: Itemize supported deb-changelog(5) keyword/value entries.
- doc: Move Perl version baseline as the first perl coding style
subsection.
- doc: Clarify required C/C++ standards.
- doc: Require POSIX.1-2008.
- man: Mention .buildinfo in dpkg-buildpackage --sign-command description.
- doc: Fix typo.
- man: Document known DEB_BUILD_OPTIONS options. Closes: #1038888
- man: Clarify the md5sums checks as integrity and not security checks.
Prompted by Sebastian Andrzej Siewior <sebast...@breakpoint.cc>.
- man: Clarify dpkg-architecture -c option.
Prompted by Paul Wise <p...@debian.org>.
- man: Document version when new programs where introduced.
- man: Fix typo in future lfs feature introduction version.
- man: Open up dpkg-build-api level 1.
* Code internals:
- libdpkg: Move early return into the loop.
- libdpkg: Remove impossible condition.
- libdpkg: Turn bitmask parse_nv_flags into an actual enum parse_nv_mode.
- libdpkg: Move parse_nv() next word check inside else block.
- dpkg: Remove path_quote_filename() usage.
- dselect: Reduce variables scope.
- libcompat: Reduce variables scope.
- libdpkg: Reduce variables scope.
- update-alternatives: Reduce variables scope.
- src: Reduce variables scope.
- libdpkg: Rename mlib module to mustlib.
- dselect: Remove unused trailing semicolons.
- libdpkg: Surround macro within a do-while block.
- perl: Add $VERSION to all embedded perl packages.
- perl: Add POD to all private modules. Closes: #1030660
- perl: Move POD sections before what they describe.
- scripts: Unpack function arguments.
- scripts: Remove duplicate variable declaration.
- dselect: Reduce variable scope to avoid shadowing.
- perl: Move $VERSION into package keyword.
- perl: Remove unused Dpkg::Version semantic_change warning suppression.
- scripts: Use «(undef) x N» to ignore tuples or function returns.
- perl: Stop removing «.» from @INC before loading modules.
- dpkg-scansources: Reorder captured variable and regex match.
- perl: Use List::Util instead of fixed string matches within a regex.
- perl: Pass $_ explicitly to field_transfer_single().
- perl: Rename filename related variables to distinguish them from field
ones.
- dpkg-genchanges: Move comment describing %sourcedefault before
declaration.
- perl: Rename Dpkg::Control variables from $f to $c or $ctrl.
- perl: Use an $f variable for fields instead of the topic variable.
- perl: Use fixed string comparisons for field name matches.
- scripts: Switch code to use chained comparisons.
- dselect: Update Andy Guy email address.
- dselect: Remove unused ismulti() function from media method actions.
- dpkg-deb: Use intermediate variable for exec mark on --info output.
- dpkg-deb: Refactor maintscript interpreter parser.
- dpkg-deb, dpkg-query: Rename option flags to opt_NAME.
- dpkg-trigger: Rename CLI option variables from f_ to opt_.
- libcompat: Declare variables before definitions.
- libdpkg: Make local variables static.
- libdpkg: Rename FHFF_NONE to FHFF_NONEW.
- libdpkg: Switch bitmasks enumerations into precise masks.
- libdpkg: Add enumerations for the default, unset and max cases.
- libdpkg: Add warning suppression macros.
- lib: Add an enum flags attribute.
- lib, src, utils: Use new enum flag C attributes.
- libdpkg: Unconditionally initialize c variable in parse_stanza().
- start-stop-daemon: Initialize variables in run_stop_schedule().
- dpkg-genchanges: Refactor .changes file description formatting into a
function.
- dpkg-genchanges: Replace Encode usage with utf8 encode/decode functions.
- dpkg-gensymbols: Use File::Compare instead of Digest::MD5.
- dselect: Reword odd code comment.
- dselect: Use «color» uniformly in variables and comments.
- libdpkg: Handle missing Version when formatting source:Upstream-Version.
Reported by John Scott <jsc...@posteo.net>.
- perl: Remove «1;» from end of script in programs.
- libdpkg: Pass -- after sh -c to avoid bogus option parsing.
Prompted by Joe Simmons-Talbott <josim...@redhat.com> (on libc-alpha).
- libdpkg: Mask the mode from the tar entry to only the file mode bits.
- lib: Define __has_include fallback if the compiler does not support it.
- libdpkg: Simplify progress output by using fputs() and putchar().
- libdpkg: Mark the progress percentage for translation. See #1034378.
- dpkg-buildpackage: Turn items into lists for easier extensibility.
- libdpkg: Make headers self-contained.
Thanks to Simon Richter <s...@debian.org>.
- libdpkg: Mark functions in headers as inline.
Thanks to Simon Richter <s...@debian.org>.
- scripts: Do not set LANG unnecessarily.
- dpkg: Move comment next to the code it is describing.
- dpkg-buildpackage: Move hook invocation closer to artifact creation.
- dpkg-buildpackage: Default the enabled run_hook() parameter to true.
- dpkg-buildpackage: Turn the run_hook() enabled argument into a hash
option.
- libcompat: Use ptrdiff_t directly instead of using a macro.
- libcompat: Update getopt code from gnulib.
- libdpkg: Remove redundant check.
- lib, src: Add const qualifiers to variables.
- dselect: Add constVariableReference as a cppcheck suppression.
- libdpkg: Fix varbuf memory leak in pkg_source_version().
- dpkg-shlibdeps: Switch from exec() to Dpkg::IPC::spawn().
Prompted by Paul Wise <p...@debian.org>.
- libdpkg: Fix coding style for varbuf module.
- libdpkg: Reorder varbuf functions.
- libdpkg: Add varbuf_add_varbuf() function.
- libdpkg: Add varbuf_add_strn().
- libdpkg: Add varbuf setter functions.
- libdpkg: Switch ustar filename construction to use varbuf_add_strn().
- dpkg-split: Use varbuf instead of ad-hoc allocation in read_info.
- Use varbuf_add_varbuf() instead of varbuf_add_buf()/_str().
- Use varbuf_set_*() instead of ad-hoc initialization.
- libdpkg: Generalize command_in_path() from find_command().
* Build system:
- Fix version script linker support detection.
- Enable -Wextra-semi compilation warning.
- Explicitly set the date when generating perl module man pages.
- Bump minimal Perl version to 5.32.1.
- Enable more compiler warnings.
- Remove unused AC_SIZEOF checks.
- Check for the host architecture attributes during configure.
- Detect whether we need librt for clock_gettime().
- Use an export symbols file if there is no version script support.
- Add -no-undefined libtool flag.
- Add support for .git-blame-ignore-revs file.
- Fix typo in .gitignore filename by renaming it.
Thanks to Simon Richter <s...@debian.org>.
- Remove vim swap file entry from .gitignore.
- Ignore tags files.
Based on a patch by Simon Richter <s...@debian.org>.
- Add perl prefixes into the Code Internals changelog section.
- Namespace COMPILER_*FLAGS with DPKG_.
- Add support for compiler sanitizer flags.
- Add support for compiler analyzer flags.
- Add new gcc-13 warnings.
- Warn on alloca() usage.
- Remove distcleancheck_listfiles override for CPAN dist-cpan target.
- Avoid Perl's exec() falling back to system().
Thanks to Paul Wise <p...@debian.org>.
See https://perldoc.perl.org/functions/exec.html.
* Packaging:
- Merge copyright statements for the same holder.
- Remove executable permissions from maintscripts in source.
- Remove no longer needed alternatives fixup from postint.
- Remove no longer needed maintscripts for method renames.
- Fix removal of file method state directory on purge.
- Wrap fields in debian/tests/control file.
- Set Persistent=true for dpkg-db-backup systemd timer.
Thanks to Teemu Likonen <tliko...@iki.fi>. Closes: #1041730
- Do not start the dpkg-db-backup timer during installation.
* Test suite:
- Update perlcritic checks and suppressions.
- Disable perlcritic checks that are not relevant.
- Reduce scope of variable to avoid shadowing others.
- Do not use potentially bogus variable value.
- Enable perlcritic RegularExpressions::ProhibitCaptureWithoutTest.
- Disable -Wassign-enum for tests using out of range enum values.
- Make some perlcritic checks more strict.
- Update rationale for perlcritic check suppressions.
- Use the TAR detected at configure time in autotests.
- Use the SED detected at configure time in autotests.
- Use m4 to implement seq instead of assuming GNU seq is present.
- Add missing argument to DPKG_FILE_SIZE m4 function.
- Add more substvar recursive replace cases.
- Define lzma based on xz if missing.
- Switch deb non-uniform members test to use uncompressed control.tar.
- Use AT_DATA instead of touch to create empty files.
- Refactor deb-format package template generation into a new macro.
- Split deb-format tests per compressor.
- Fix t-disappear-depended test.
- Add cases for disappearing with diversions.
- Add cases for disappearance on diverted overwrites and third parties.
Suggested by Simon Richter <s...@debian.org>.
- Quote command variables in case these contain spaces.
- Use the GREP/EGREP detected at configure time in autotests.
- Pass -n to gzip for all invocations.
- Generate the pkg-old.deb from controlled parts.
- Compute the sizes for «dpkg-deb -I» output dynamically.
- Add test cases for dpkg-buildpackage hook support.
- Use dpkg-buildpackage --no-sign instead of each --unsigned-* option.
- Add new stop words for codespell 2.2.5.
- Update cppcheck suppressions for 2.11.
- Define macros to help cppcheck analyze code.
- Fix varbuf memory leak in t-pkg-format test.
- Rename merge_changlogs test to match the command being tested.
- Add new test case checking Conflicts with Replaces.
- Fix t-conffile-divert-conffile case.
- Use «ar qc» to create archives with duplicate members.
- Move test_data_file() to test.h.
* Localization:
- Add Portuguese scripts translations.
Thanks to Américo Monteiro <a_monte...@gmx.com>. Closes: #1032562
- Clarify license for translation files.
- Fix Project-Id-Version to match the gettext domain.
- Unify translation header description.
- Update Dutch header boilerplate with an actual copyright line.
- Update French scripts translation.
Thanks to Sébastien Poher <sebast...@volted.net>.
- Update Romanian dselect translation.
Thanks to Remus-Gabriel Chelu <remusgabriel.ch...@disroot.org>.
Closes: #1040869
- Use Dpkg Developers instead of listing them individually.
.
[ Helge Kreutzmann ]
* man: Remove a now superfluous character from dpkg(1).
* Localization:
- Update German man pages translation.
- Update German scripts translation.
.
[ Sven Joachim ]
* Localization:
- Update German dselect translation.
- Update German programs translation.
Checksums-Sha1:
cc2622428d560d364e70e0766145596b54622e05 3041 dpkg_1.22.0.dsc
13702dc39784e1193b808354588b13719df459bf 5519320 dpkg_1.22.0.tar.xz
bb45879ab0ba9f04e59686ce70cc8ac8e95b2f80 7955 dpkg_1.22.0_amd64.buildinfo
Checksums-Sha256:
2c2b2ef29e2dfbb9d7b7fade69118175ef5a7eefcafc3606df16912afd83bb8d 3041
dpkg_1.22.0.dsc
cd1525aa169afa0e60044b23f31c23523a339023754878a4210d74abd98c72ed 5519320
dpkg_1.22.0.tar.xz
e96c2690e47e7a563a1792b02f886d65f4fa07517df1c3380ec7368557fcb166 7955
dpkg_1.22.0_amd64.buildinfo
Files:
c6ea79a83f1869bd75fec421b7cf8697 3041 admin required dpkg_1.22.0.dsc
b5f34890817141fdf5c5bafdcfbcb75a 5519320 admin required dpkg_1.22.0.tar.xz
687c34a4f0f675f6adc7b953576b1cd6 7955 admin required
dpkg_1.22.0_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=ptmg
-----END PGP SIGNATURE-----
--- End Message ---