ruga@protonmail.com wrote:

This is a multi-part message in MIME format.

Please stop using HTML email.

--b1_d8637dbb120a529f4f26d43d4b089cee Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64

SWYgSSBhZGQgdGhlICItdiIgb3B0aW9uIHRvIGNsYW5nIGluIC4vbGlicmFyaWVzL01ha2VmaWxl

If I add the "-v" option to clang in ./libraries/Makefile, the resulting log shows that the library was linked twice, causing symbol duplication.> This holds on macos 10.13 with Apple toolkit 10.14 and the original llvm 7.0.0 with the given settings.

Still, nothing in the OpenLDAP build setup does this. You did it yourself, most likely the same way you set "-D_FORTIFY_SOURCE=2" 3 times in your CPPFLAGS.

This ITS is closed. There is no OpenLDAP Software issue here, you've misconfigured your build.

On Mon, Jan 28, 2019 at 17:11, Quanah Gibson-Mount quanah@symas.com wrote:

...

--On Monday, January 28, 2019 3:35 PM +0000 Rupert Gallagher ruga@protonmail.com wrote:

...

As you can see, I am using the default Apple linker, and hardened settings for the compiler. Try using those settings yourself, and see what comes out.

I tested on FreeBSD12 (since it uses clang rather than gcc) with the following flags and the build completed w/o issue:

CFLAGS= -g -fstack-protector-all -fno-omit-frame-pointer -fPIC -fPIE -O2 -Wformat -Wformat-security -Werror=format-security LDFLAGS= -Wl,-z,relro,-z,now -pie CPPFLAGS= -D_FORTIFY_SOURCE=2 -D_FORTIFY_SOURCE=2 -D_FORTIFY_SOURCE=2