ld: error: triggering the generation of an executable stack

[Orion Poplawski]

With a recent update, plplot is failing to build with:

cd 
/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/examples/fortran 
&& /usr/bin/cmake -E cmake_link_script CMakeFiles/x16af.dir/link.txt 
--verbose=1
/usr/bin/gfortran -Wl,-z,relro -Wl,--as-needed 
-Wl,-z,pack-relative-relocs -Wl,-z,now 
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors 
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld 
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -O2 
-flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe 
-Wall -Wno-complain-wrong-lang -Werror=format-security 
-Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS 
-specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong 
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64 
-mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection 
-fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer 
-mno-omit-leaf-frame-pointer -frecursive 
CMakeFiles/x16af.dir/x16af.f90.o -o x16af 
-Wl,-rpath,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/bindings/fortran:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime 
../libplfortrandemolib.a 
../../bindings/fortran/libplplotfortran.so.0.2.0 
-Wl,-rpath-link,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
/usr/bin/ld: error: /tmp/cchkMGCX.ltrans0.ltrans.o: is triggering the 
generation of an executable stack (because it has an executable 
.note.GNU-stack section)
/usr/bin/ld: failed to set dynamic section sizes: No such file or directory

I have no idea what is up here.

Seems to have started with:

gcc 14.0.1-0.7.fc41
glibc 2.39.9000-3.fc41
util-linux 2.40-0.9.rc1.fc41
binutils 2.42.50-4.fc41

and lots of others, but that seems the most likely.

[Dominik 'Rathann' Mierzejewski]

On Wednesday, 20 March 2024 at 01:27, Orion Poplawski wrote:
> With a recent update, plplot is failing to build with:
>
> cd /builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/examples/fortran
> && /usr/bin/cmake -E cmake_link_script CMakeFiles/x16af.dir/link.txt
> --verbose=1
> /usr/bin/gfortran -Wl,-z,relro -Wl,--as-needed -Wl,-z,pack-relative-relocs
> -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -O2
> -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe
> -Wall -Wno-complain-wrong-lang -Werror=format-security
> -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS
> -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64
> -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection
> -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer
> -mno-omit-leaf-frame-pointer -frecursive CMakeFiles/x16af.dir/x16af.f90.o -o
> x16af -Wl,-rpath,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/bindings/fortran:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
> ../libplfortrandemolib.a ../../bindings/fortran/libplplotfortran.so.0.2.0 -Wl,-rpath-link,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
> /usr/bin/ld: error: /tmp/cchkMGCX.ltrans0.ltrans.o: is triggering the
> generation of an executable stack (because it has an executable
> .note.GNU-stack section)
> /usr/bin/ld: failed to set dynamic section sizes: No such file or directory
>
> I have no idea what is up here.
>
> Seems to have started with:
>
> gcc 14.0.1-0.7.fc41
> glibc 2.39.9000-3.fc41
> util-linux 2.40-0.9.rc1.fc41
> binutils 2.42.50-4.fc41
>
> and lots of others, but that seems the most likely.

koschei shows that this started on Feb 24th:
https://koschei.fedoraproject.org/build/17466620

Most likely culprit is indeed glibc (2.39->2.39.9000)
or binutils (2.41->2.42.50).

This binutils patch seems relevant:
https://inbox.sourceware.org/binutils/20240126214553.46536-1-hjl.tools@gmail...
However, the error message is slightly different.

Regards,
Dominik

[Susi Lehtola]

Hi,

resurrecting the old thread from March 2024, I have now also faced this issue:
OpenMolcas 25.06 fails to build on all architectures in Fedora rawhide with the
cryptic error

make[2]: Entering directory
'/builddir/build/BUILD/OpenMolcas-25.06-build/OpenMolcas-v25.06-805c93ebfa2cd5fa185ca03cf965580ebdfeb352/x86_64-redhat-linux-gnu'
[ 65%] Linking Fortran shared library lib/libmolcas.so
/usr/bin/cmake -E cmake_link_script CMakeFiles/libmolcas.dir/link.txt --verbose=1
/usr/bin/gfortran -fPIC -O2 -flto=auto -ffat-lto-objects -fexceptions -g
-grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang
-Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3
-Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
-fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64
-march=x86-64 -mtune=generic -fasynchronous-unwind-tables
-fstack-clash-protection -fcf-protection -mtls-dialect=gnu2
-fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -cpp -fopenmp
-fdefault-integer-8 -fPIC -I/usr/lib64/gfortran/modules
-fallow-argument-mismatch -DNDEBUG
-Wl,--dependency-file=CMakeFiles/libmolcas.dir/link.d -Wl,-z,relro
-Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld
-specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1
-specs=/usr/lib/rpm/redhat/redhat-package-notes -shared -Wl,-soname,libmolcas.so
-o lib/libmolcas.so @CMakeFiles/libmolcas.dir/objects1.rsp
@CMakeFiles/libmolcas.dir/objects2.rsp
make[2]: Leaving directory
'/builddir/build/BUILD/OpenMolcas-25.06-build/OpenMolcas-v25.06-805c93ebfa2cd5fa185ca03cf965580ebdfeb352/x86_64-redhat-linux-gnu'
/usr/bin/ld: error: /tmp/cc8rKBj0.ltrans126.ltrans.o: is triggering the
generation of an executable stack (because it has an executable .note.GNU-stack
section)
/usr/bin/ld: failed to set dynamic section sizes: no more archived files
collect2: error: ld returned 1 exit status

but the same sources build without issue on Fedora 42.

[Florian Weimer]

* Susi Lehtola:
> resurrecting the old thread from March 2024, I have now also faced this issue:
> OpenMolcas 25.06 fails to build on all architectures in Fedora rawhide with the
> cryptic error
>
> make[2]: Entering directory
> '/builddir/build/BUILD/OpenMolcas-25.06-build/OpenMolcas-v25.06-805c93ebfa2cd5fa185ca03cf965580ebdfeb352/x86_64-redhat-linux-gnu'
> [ 65%] Linking Fortran shared library lib/libmolcas.so
> /usr/bin/cmake -E cmake_link_script CMakeFiles/libmolcas.dir/link.txt --verbose=1
> /usr/bin/gfortran -fPIC -O2 -flto=auto -ffat-lto-objects -fexceptions -g
> -grecord-gcc-switches -pipe -Wall -Wno-complain-wrong-lang
> -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3
> -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1
> -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64
> -march=x86-64 -mtune=generic -fasynchronous-unwind-tables
> -fstack-clash-protection -fcf-protection -mtls-dialect=gnu2
> -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -cpp -fopenmp
> -fdefault-integer-8 -fPIC -I/usr/lib64/gfortran/modules
> -fallow-argument-mismatch -DNDEBUG
> -Wl,--dependency-file=CMakeFiles/libmolcas.dir/link.d -Wl,-z,relro
> -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1
> -specs=/usr/lib/rpm/redhat/redhat-package-notes -shared -Wl,-soname,libmolcas.so
> -o lib/libmolcas.so @CMakeFiles/libmolcas.dir/objects1.rsp
> @CMakeFiles/libmolcas.dir/objects2.rsp
> make[2]: Leaving directory
> '/builddir/build/BUILD/OpenMolcas-25.06-build/OpenMolcas-v25.06-805c93ebfa2cd5fa185ca03cf965580ebdfeb352/x86_64-redhat-linux-gnu'
> /usr/bin/ld: error: /tmp/cc8rKBj0.ltrans126.ltrans.o: is triggering the
> generation of an executable stack (because it has an executable .note.GNU-stack
> section)
> /usr/bin/ld: failed to set dynamic section sizes: no more archived files
> collect2: error: ld returned 1 exit status
>
> but the same sources build without issue on Fedora 42.

Can you build

CFLAGS="$CFLAGS -Wtrampolines"

and see if there are any warnings in the build log?

Thanks,
Florian

[Susi Lehtola]

On 6/16/25 12:32 PM, Florian Weimer wrote:
> Susi Lehtola:
> > resurrecting the old thread from March 2024, I have now also faced this issue:
> > OpenMolcas 25.06 fails to build on all architectures in Fedora rawhide with the
> > cryptic error
>
> Can you build
>
> CFLAGS="$CFLAGS -Wtrampolines"
>
> and see if there are any warnings in the build log?

Hi Florian,

thanks for the suggestion! Indeed, adding -Wtrampolines to the Fortran compiler
flags reveals one function that generates a trampoline. I guess that function
may need to be replaced to fix the issue.

Best wishes,

Susi

[Fabio Valentini]

On Wed, Mar 20, 2024, 01:28 Orion Poplawski  wrote:
> With a recent update, plplot is failing to build with:
>
> cd
> /builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/examples/fortran
> && /usr/bin/cmake -E cmake_link_script CMakeFiles/x16af.dir/link.txt
> --verbose=1
> /usr/bin/gfortran -Wl,-z,relro -Wl,--as-needed
> -Wl,-z,pack-relative-relocs -Wl,-z,now
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -O2
> -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe
> -Wall -Wno-complain-wrong-lang -Werror=format-security
> -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS
> -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64
> -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection
> -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer
> -mno-omit-leaf-frame-pointer -frecursive
> CMakeFiles/x16af.dir/x16af.f90.o -o x16af
> -Wl,-rpath,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/bindings/fortran:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
>
> ../libplfortrandemolib.a
> ../../bindings/fortran/libplplotfortran.so.0.2.0
>
> -Wl,-rpath-link,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
> /usr/bin/ld: error: /tmp/cchkMGCX.ltrans0.ltrans.o: is triggering the
> generation of an executable stack (because it has an executable
> .note.GNU-stack section)
> /usr/bin/ld: failed to set dynamic section sizes: No such file or directory
>
> I have no idea what is up here.

Isn't this what this change was about?

https://fedoraproject.org/wiki/Changes/Linker_Error_On_Security_Issues

Fabio
> Seems to have started with:
>
> gcc 14.0.1-0.7.fc41
> glibc 2.39.9000-3.fc41
> util-linux 2.40-0.9.rc1.fc41
> binutils 2.42.50-4.fc41
>
> and lots of others, but that seems the most likely.
>
> --
> Orion Poplawski
> he/him/his  - surely the least important thing about me
> IT Systems Manager                         720-772-5637
> NWRA, Boulder/CoRA Office             FAX: [phone]
> 3380 Mitchell Lane                       [e-mail]
> Boulder, CO 80301                 https://www.nwra.com/
> --
> _______________________________________________
> devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Jerry James]

On Tue, Mar 19, 2024 at 6:28 PM Orion Poplawski  wrote:
> With a recent update, plplot is failing to build with:
>
> cd
> /builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/examples/fortran
> && /usr/bin/cmake -E cmake_link_script CMakeFiles/x16af.dir/link.txt
> --verbose=1
> /usr/bin/gfortran -Wl,-z,relro -Wl,--as-needed
> -Wl,-z,pack-relative-relocs -Wl,-z,now
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld-errors
> -specs=/usr/lib/rpm/redhat/redhat-hardened-ld
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -Wl,--build-id=sha1 -O2
> -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe
> -Wall -Wno-complain-wrong-lang -Werror=format-security
> -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS
> -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong
> -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64
> -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection
> -fcf-protection -mtls-dialect=gnu2 -fno-omit-frame-pointer
> -mno-omit-leaf-frame-pointer -frecursive
> CMakeFiles/x16af.dir/x16af.f90.o -o x16af
> -Wl,-rpath,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/bindings/fortran:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
> ../libplfortrandemolib.a
> ../../bindings/fortran/libplplotfortran.so.0.2.0
> -Wl,-rpath-link,/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/src:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/csa:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/nn:/builddir/build/BUILD/plplot-5.15.0/redhat-linux-build/lib/qsastime
> /usr/bin/ld: error: /tmp/cchkMGCX.ltrans0.ltrans.o: is triggering the
> generation of an executable stack (because it has an executable
> .note.GNU-stack section)
> /usr/bin/ld: failed to set dynamic section sizes: No such file or directory
>
> I have no idea what is up here.
>
> Seems to have started with:
>
> gcc 14.0.1-0.7.fc41
> glibc 2.39.9000-3.fc41
> util-linux 2.40-0.9.rc1.fc41
> binutils 2.42.50-4.fc41
>
> and lots of others, but that seems the most likely.

At least one of the Fortran example programs (x09f) really does
require an executable stack.  This PR will work around the build issue
for now, but the reason why it requires an executable stack should be
investigated:

https://src.fedoraproject.org/rpms/plplot/pull-request/6