dovecot - May 2007 - [Blasphemy] Can I build dovecot with "-fstack-protector"?

I tried building dovecot using :

CPPFLAGS="-fstack-protector" LDFLAGS="-lssp" ./configure

That would result in a proper build, yet the binary would complain
once being run:

dlopen(/usr/local/lib/dovecot/imap/lib10_quota_plugin.so) failed:
/usr/local/lib/dovecot/imap/lib10_quota_plugin.so: undefined symbol:
__stack_chk_fail_local
Error: imap dump-capability process returned 89

and the like. So: Is it possible at all? 

And sorry for the blasphemy of daring to ask this in the first place :)

-- 
Ralf Hildebrandt (Ralf.Hildebrandt at charite.de)             plonk at
charite.de
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
First Law of System Requirements:
   "Anything is possible if you don't know what you're talking
about..."

On Wed, 2007-05-16 at 22:47 +0200, Ralf Hildebrandt
wrote:
> I tried building dovecot using :
> 
> CPPFLAGS="-fstack-protector" LDFLAGS="-lssp"
./configure
> 
> That would result in a proper build, yet the binary would complain
> once being run:
> 
> dlopen(/usr/local/lib/dovecot/imap/lib10_quota_plugin.so) failed:
> /usr/local/lib/dovecot/imap/lib10_quota_plugin.so: undefined symbol:
__stack_chk_fail_local
Are you sure the imap binary is linked with -lssl? I've never used
-fstack-protector, but I think that symbol should exist in the libssl
library.

If you disable quota plugin, I guess it works then.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20070517/dfaea4ee/attachment.bin>

Ralf Hildebrandt wrote:
> I tried building dovecot using :
>
> CPPFLAGS="-fstack-protector" LDFLAGS="-lssp"
./configure
>
> That would result in a proper build, yet the binary would complain
> once being run:
>
> dlopen(/usr/local/lib/dovecot/imap/lib10_quota_plugin.so) failed:
> /usr/local/lib/dovecot/imap/lib10_quota_plugin.so: undefined symbol:
__stack_chk_fail_local
> Error: imap dump-capability process returned 89
>
> and the like. So: Is it possible at all?
>   
All SuSE Linux binaries starting with v10.0 are built with

-fstack-protector and works as expected.

v1.0 successful build and source rpm available at
http://software.opensuse.org/download/server:/mail/openSUSE_10.2/

For my own builds I also always successfully used 
-fstack-protector.

Uldis