Bug 2187553

Summary: Build assembly files with CET
Product: [Fedora] Fedora Reporter: Siddhesh Poyarekar <sipoyare>
Component: llvmAssignee: Nikita Popov <npopov>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 37CC: dmalcolm, jakub, jchecahi, jistone, kkleine, npopov, scottt.tw, serge.guelton, siddharth.kde, tbaeder, tstellar, tuliom
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: llvm-15.0.7-2.fc37 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-05-05 14:50:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Siddhesh Poyarekar 2023-04-17 23:24:19 UTC
The following change:

commit 8e1f53d786eed2a421793e354f7e08f327a31f73
Author: Nikita Popov <npopov>
Date:   Fri Nov 11 10:23:47 2022 +0100

    Copy CFLAGS to ASMFLAGs to enable CET in asm files

fixed an issue in llvm build on x86_64 where the final libLLVM.so did not get the SHSTK tag because some assembly files were not built with -fcf-protection.  Backport this into F37 so that libLLVM-15.so is usable with shadowstack userspace support enabled.

Reproducible: Always

Comment 1 Nikita Popov 2023-04-18 08:56:51 UTC
https://src.fedoraproject.org/rpms/llvm/pull-request/169 (untested, will need to check artifacts once the scratch build is done).

Comment 2 Fedora Update System 2023-04-20 08:07:50 UTC
FEDORA-2023-34a075d304 has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2023-34a075d304

Comment 3 Fedora Update System 2023-04-21 03:52:48 UTC
FEDORA-2023-34a075d304 has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-34a075d304`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-34a075d304

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2023-05-05 14:50:24 UTC
FEDORA-2023-34a075d304 has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.