diff options
author | Joel Brobecker <brobecker@adacore.com> | 2022-12-06 18:25:38 +0400 |
---|---|---|
committer | Marc Poulhiès <poulhies@adacore.com> | 2023-05-15 11:36:40 +0200 |
commit | a92397f05dea514bc7ccc355c70dfb97d2474cb0 (patch) | |
tree | 7a5580b5b35eaabda0b5ff4c2c9e46732e4f133c /gcc/ada/doc/gnat_ugn | |
parent | 468a053530fa72b1ed66f78b6faf4d1fed220a17 (diff) | |
download | gcc-a92397f05dea514bc7ccc355c70dfb97d2474cb0.zip gcc-a92397f05dea514bc7ccc355c70dfb97d2474cb0.tar.gz gcc-a92397f05dea514bc7ccc355c70dfb97d2474cb0.tar.bz2 |
ada: GNAT UGN: Add section documenting PIE being enabled by default on Linux
This commit updates the Linux-specific chapter to add a new section
documenting the fact that PIE is enabled by default, and provides
some information about the impact that this might have on some
projects, as well as recommendations on how to handle issues.
gcc/ada/
* doc/gnat_ugn/platform_specific_information.rst
(_PIE_Enabled_By_Default_On_Linux): New section.
* gnat-style.texi: Regenerate.
* gnat_ugn.texi: Regenerate.
Diffstat (limited to 'gcc/ada/doc/gnat_ugn')
-rw-r--r-- | gcc/ada/doc/gnat_ugn/platform_specific_information.rst | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/gcc/ada/doc/gnat_ugn/platform_specific_information.rst b/gcc/ada/doc/gnat_ugn/platform_specific_information.rst index a136a5a..3744b74 100644 --- a/gcc/ada/doc/gnat_ugn/platform_specific_information.rst +++ b/gcc/ada/doc/gnat_ugn/platform_specific_information.rst @@ -254,6 +254,48 @@ Other GNU/Linux distributions might be choosing a different name for those packages. +.. _PIE_Enabled_By_Default_On_Linux: + +Position Independent Executable (PIE) Enabled by Default on Linux +----------------------------------------------------------------- + +GNAT generates Position Independent Executable (PIE) code by default. +PIE binaries are loaded into random memory locations, introducing +an additional layer of protection against attacks. + +Building PIE binaries requires that all of their dependencies also be +built as Position Independent. If the link of your project fails with +an error like:: + + /[...]/ld: /path/to/object/file: relocation R_X86_64_32S against symbol + `symbol name' can not be used when making a PIE object; + recompile with -fPIE + +it means the identified object file has not been built as Position +Independent. + +If you are not interested in building PIE binaries, you can simply +turn this feature off by first compiling your code with :samp:`-fno-pie` +and then by linking with :samp:`-no-pie` (note the subtle but important +difference in the names of the options -- the linker option does **not** +have an `f` after the dash!). When using gprbuild, this is +achieved by updating the *Required_Switches* attribute in package `Compiler` +and, depending on your type of project, either attribute *Switches* +or attribute *Library_Options* in package `Linker`. + +On the other hand, if you would like to build PIE binaries and you are +getting the error above, a quick and easy workaround to allow linking +to succeed again is to disable PIE during the link, thus temporarily +lifting the requirement that all dependencies also be Position +Independent code. To do so, you simply need to add :samp:`-no-pie` to +the list of switches passed to the linker. As part of this workaround, +there is no need to adjust the compiler switches. + +From there, to be able to link your binaries with PIE and therefore +drop the :samp:`-no-pie` workaround, you'll need to get the identified +dependencies rebuilt with PIE enabled (compiled with :samp:`-fPIE` +and linked with :samp:`-pie`). + .. _A_GNU_Linux_debug_quirk: A GNU/Linux Debug Quirk |