Your message dated Wed, 15 Jul 2026 17:34:03 +0000
with message-id <[email protected]>
and subject line Bug#1101937: fixed in vkd3d 2.0+ds-1
has caused the Debian Bug report #1101937,
regarding libvkd3d-shader1: vkd3d libraries have executable stack, with a
comment indicating it might be unintended
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1101937: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101937
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libvkd3d-shader1
Version: 1.2-15
Severity: normal
X-Debbugs-Cc: Giovanni Mascellani <[email protected]>, Elizabeth Figura
<[email protected]>, [email protected]
All of the VKD3D libraries (of which libvkd3d-shader1 is the
lowest-level) are marked as requiring an executable stack:
$ podman run --rm -it debian:sid-slim
# apt update
# apt install binutils libvkd3d-utils1
# readelf -l /usr/lib/*/libvkd3d*.so.1| grep -A1 GNU_STACK
GNU_STACK 0x0000000000000000 0x0000000000000000 0x0000000000000000
0x0000000000000000 0x0000000000000000 RWE 0x10
--
GNU_STACK 0x0000000000000000 0x0000000000000000 0x0000000000000000
0x0000000000000000 0x0000000000000000 RWE 0x10
--
GNU_STACK 0x0000000000000000 0x0000000000000000 0x0000000000000000
0x0000000000000000 0x0000000000000000 RWE 0x10
(the "E" indicates executable stack, you'd see "RW" for a typical shared
library)
This is sometimes necessary for self-modifying code, but it defeats some
security hardening measures. Since glibc 2.41, it also means that none
of the VKD3D libraries can be dlopen'd, unless the executable or one of
its DT_NEEDED dependencies *also* requests an executable stack.
This seems to have been introduced in commit 67a40fc5 "release 1.2-15"[0],
with this comment in debian/rules, and no further clarification in the
commit message or changelog:
> # disable executable stack
> export DEB_LDFLAGS_MAINT_APPEND=-Wl,-z,execstack
The word "disable" in the comment is not consistent with the linker
option chosen in the line below. I see two possibilities:
1. this library genuinely does need an executable stack, and the comment
should say so (and ideally mention why) instead of claiming that it's
being disabled;
2. or this library does not need an executable stack, the linker flag
was intended to disable it or silence a warning, but the wrong linker
flag was used, and it should say something more like -Wl,-z,noexecstack
For what it's worth, Fedora[1] and Arch[2] don't seem to use any special
linker options, which suggests that either (2.) is the right
interpretation, or the need for an executable stack has gone away in
newer upstream releases (see #1033733).
Can a maintainer or one of the contributors to #1033733 shed some light
on this?
Thanks,
smcv
[0]
https://salsa.debian.org/wine-team/vkd3d/-/commit/67a40fc5e14ce05b0863dda6be878759f7be8934
[1] https://src.fedoraproject.org/rpms/vkd3d/blob/rawhide/f/vkd3d.spec
[2]
https://gitlab.archlinux.org/archlinux/packaging/packages/vkd3d/-/blob/main/PKGBUILD?ref_type=heads
--- End Message ---
--- Begin Message ---
Source: vkd3d
Source-Version: 2.0+ds-1
Done: Stephen Kitt <[email protected]>
We believe that the bug you reported is fixed in the latest version of
vkd3d, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stephen Kitt <[email protected]> (supplier of updated vkd3d package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 Jul 2026 19:44:30 +0200
Source: vkd3d
Architecture: source
Version: 2.0+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Wine Party <[email protected]>
Changed-By: Stephen Kitt <[email protected]>
Closes: 1033733 1101937
Changes:
vkd3d (2.0+ds-1) unstable; urgency=medium
.
* Team upload.
* New upstream release (Closes: #1033733)
.
[ Simon McVittie ]
* New upstream releases 1.7, ..., 1.19
- d/*.symbols: Update
- d/control: Bump dependency on Vulkan-Headers as per configure.ac
- d/control: Build-depend on bison and flex as per configure.ac
- d/vkd3d-demos.install: Install new vkd3d-teapot demo
- d/copyright: Update for files that are autogenerated since 1.13
- d/copyright: Update copyright dates
* Rebase patch series on upstream v1.16
- d/p/fixes/nvidia.patch: Drop, equivalent to upstream commit
64bd7f67 "tests: Mark WriteToSubresource test as todo on NVIDIA.".
- d/p/fixes/byte-comparison.patch: Drop patch, no longer applies.
If this is still necessary, then it should go upstream.
- d/p/fixes/llvmpipe.patch: Drop patch.
This was a workaround for what appears to have been a llvmpipe bug.
- d/patches: Add timestamps to patches.
Taken from debian/changelog for the appropriate releases.
* d/rules: Stop enabling executable stack.
This doesn't appear to have been necessary (Closes: #1101937)
* d/rules: Stop renaming demos.
Obsoleted by 8cc940df "build: Install the gears and triangle demos."
upstream.
* d/rules: Don't build Doxygen docs with dpkg-buildpackage -B,
even if the Build-Depends-Indep happen to have been installed
* d/control: Ensure that GL, Vulkan drivers are available to run the
test suite. This gives us some test coverage, which is better than none.
* d/rules: After running tests, show all test logs.
The default terse output from Automake doesn't show us which parts of
which tests were skipped.
* d/rules:
Behave as if the VK_EXT_fragment_shader_interlock was unsupported when
running tests. Otherwise, rasteriser-ordered-views.shader_test fails
when run on lavapipe, as a result of what is believed to be a bug
in lavapipe's implementation of that extension.
* d/vkd3d-compiler.install: Install vkd3d-dxbc, too
* d/vkd3d-demos.install: Let the upstream build system install the demos
* d/control, d/rules: Explicitly enable highlighted output from compiler
* d/rules: Explicitly enable xcb support
* d/.gitignore: Stop listing debian/control to be ignored.
It was a generated file before 1.2-15, but is now source.
* d/.gitignore: Ignore generated files in debian/
* d/tests: Add superficial smoke-tests.
These don't have much coverage, but they do make sure the compiler can
be run and the libraries can be linked, which catches surprisingly many
possible packaging errors.
* d/control: Use non-transitional name for libxcb-util-dev
* d/control: Build-depend on libjson-perl as per configure.ac
* d/upstream/metadata: Switch URLs to WineHQ Gitlab
* d/clean: Clean up files that exist in git but not in tarball releases
* d/copyright: Update
* d/copyright: Normalize order of excluded files
.
[ Stephen Kitt ]
* Drop the signing key, it uses SHA-1 which sqv doesn’t accept. See
#1118154.
* Drop “Rules-Requires-Root: no” since it’s now the default.
* Drop “Priority: optional” since it’s now the default.
* Build-depend on pkgconf instead of pkg-config.
* Add a +ds suffix to indicate that the upstream tarball is repacked.
* Drop the obsolete versioned dependency on dpkg.
* Standards-Version 4.7.4, no further change required.
.
[ Antonio Ospite ]
* New upstream release 2.0
* d/patches: Drop patches merged in upstream version 2.0
Checksums-Sha1:
c2d6e2c9b03753b799a0415c0ce5ce9209bc4a26 3394 vkd3d_2.0+ds-1.dsc
3fa233b75e7caa96e4f6ca5c5c41f4256902c949 1125120 vkd3d_2.0+ds.orig.tar.xz
1be6a3bbb69d2f7ba7ec96673657f46fec861d72 11552 vkd3d_2.0+ds-1.debian.tar.xz
6d98598216e6dd1b23de0058072d8bda5e00cc95 6924 vkd3d_2.0+ds-1_source.buildinfo
Checksums-Sha256:
b0632f46b06511d65930effbb55d151a4849179ce74b8f53f1b745b906935e8a 3394
vkd3d_2.0+ds-1.dsc
7a5d631ca7794373a00049b86d55cc4764b9fe185f5fed25e41735fd31dc6419 1125120
vkd3d_2.0+ds.orig.tar.xz
45d8cf64df5a212da11690997cf1bd1e070a41bb804db0ef82ec2969c649f91a 11552
vkd3d_2.0+ds-1.debian.tar.xz
f5ec38e48f9dcc1bc5873bee62d4b91a475d4ef38d3b0db6cbff132fd7f6b96a 6924
vkd3d_2.0+ds-1_source.buildinfo
Files:
7f955cbf7431dc112f2f87bd72e40777 3394 libs optional vkd3d_2.0+ds-1.dsc
5fd965856479623c70629712b78cc67b 1125120 libs optional vkd3d_2.0+ds.orig.tar.xz
48b2d6a6995145db589b59e8f0ed1ebb 11552 libs optional
vkd3d_2.0+ds-1.debian.tar.xz
77f61b7c03667174cfb38ef2f65e8f93 6924 libs optional
vkd3d_2.0+ds-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=vNIy
-----END PGP SIGNATURE-----
pgphdVK84LMSu.pgp
Description: PGP signature
--- End Message ---
