X-Recipient: archive-cygwin AT delorie DOT com
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 61F8C3858433
Authentication-Results: sourceware.org;
 dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=message-id:date:mime-version:user-agent:subject:content-language:to
 :references:from:in-reply-to:content-transfer-encoding;
 bh=cqDl8k9j5/KRUHb+0bO9ent6v9xJxoBnz6mia6m1Ed4=;
 b=VXVWfDq+J/2h0nN7CzJZFrZs6Qy7AdyjhkYaIKZ7xGi59P261hI2HbfBx8Phj7pWsJ
 JgGvhDkkT1cbNgcWhCaXr5lH4fVOycbPaS768GqWydz0APY/Kvtzd8IgB/Sk/hTu9w4l
 yBoyYUqLdHZsVbX/lZ8YvztxcSHZDGxfCEMyYQuED55KRSauy2SChZwwoR6uXUhuqCq3
 67oRONf0GhmVgftWEILUH3n1Pb4oQS5cEWxFXKhVgx8r8Y4p8dMYJnHcdFFWUiRJ7q+W
 jEM6MiQ9S59ui0CGQd9V8aN8+z8Jnz524+dgE2yiBsexrFByCQShNP2W42CUGl3d4vm/
 7zFg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=x-gm-message-state:message-id:date:mime-version:user-agent:subject
 :content-language:to:references:from:in-reply-to
 :content-transfer-encoding;
 bh=cqDl8k9j5/KRUHb+0bO9ent6v9xJxoBnz6mia6m1Ed4=;
 b=1pWh5I7ccR21utk22gTCphZ1/yv7RW1sS2Gnq1AAYEg1aE6E9eW53MTURXHS2kmsLK
 WezDfIzG39Pkywz8JBMHny6/AoAGAkKVwiYGnjZjXa0cyNCix+HNaDG4MH/NxlvFH3N2
 kCeiEBR6eb5XXz6CYUT2WH7HkET+Byt0c9ZwIpGs7/8jD5KxOpf1hVn4a3ynKoGuM7N2
 mXpUqR9BPhbVp1l+K2LcxK4+KBapNA56fYnSaVeS3oGQ6NuKhjgH1rhHOYkduuCxoXRY
 aXPtGQS5KVAHGmQkuaHaagTM38Il8k1qen212MQTzshFR0raBAEV6jmRlyo63PcgKAA7
 NTEg==
X-Gm-Message-State: AOAM530sxp1rqM282Iu6uDlfBvNlcOYcKk1YZkJC80PrHGklRjudyEjW
 e69pqJH8Pvmoj56PiYRFfWtX+fyW0vT6NxE/
X-Google-Smtp-Source: ABdhPJylX8Uz4lEl2xSEKdTR0kZxPNjuv094CBBLPSIHKw3Ou6HMn716Fh6I3t3wZENq2zGibJjB6w==
X-Received: by 2002:a05:6402:35c2:: with SMTP id
 z2mr19088623edc.43.1640657973335; 
 Mon, 27 Dec 2021 18:19:33 -0800 (PST)
Message-ID: <c35be882-155c-fab6-5a75-b0ef27cbbe0c@gmail.com>
Date: Tue, 28 Dec 2021 03:19:31 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
 Thunderbird/91.4.1
Subject: Re: python 3.9 package leaks CFLAGS into user packages via sysconfig
Content-Language: it
To: cygwin AT cygwin DOT com
References: <CAJ_wo5gZp2ChiNWokn3vryB1Dzwrs-4sJQwm-28r1Ym_m5mH_A AT mail DOT gmail DOT com>
From: Marco Atzeri <marco DOT atzeri AT gmail DOT com>
In-Reply-To: <CAJ_wo5gZp2ChiNWokn3vryB1Dzwrs-4sJQwm-28r1Ym_m5mH_A@mail.gmail.com>
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00, DKIM_SIGNED,
 DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, NICE_REPLY_A,
 RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
 TXREP autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On 28.12.2021 02:27, Matthias Koeppe wrote:
> $ python3.9 -m sysconfig | grep CFLAGS
> CFLAGS = "-Wno-unused-result -Wsign-compare -DNDEBUG -g -fwrapv -O3 -Wall
> -ggdb -O2 -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2
> -fstack-protector-strong --param=ssp-buffer-size=4 -DOPENSSL_NO_SSL3=1
> -I/usr/include/uuid/
> -fdebug-prefix-map=/pub/devel/python/python39/python39-3.9.9-1.x86_64/build=/usr/src/debug/python39-3.9.9-1
> -fdebug-prefix-map=/pub/devel/python/python39/python39-3.9.9-1.x86_64/src/Python-3.9.9=/usr/src/debug/python39-3.9.9-1
> -ggdb -O2 -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2
> -fstack-protector-strong --param=ssp-buffer-size=4 -DOPENSSL_NO_SSL3=1
> -I/usr/include/uuid/
> -fdebug-prefix-map=/pub/devel/python/python39/python39-3.9.9-1.x86_64/build=/usr/src/debug/python39-3.9.9-1
> -fdebug-prefix-map=/pub/devel/python/python39/python39-3.9.9-1.x86_64/src/Python-3.9.9=/usr/src/debug/python39-3.9.9-1"
> 
> These flags will end up in builds of user Python packages with extensions
> via sysconfig/distutils.
> This should be fixed by putting the necessary flags for the Python build
> into CFLAGS_NODIST instead -- see similar fix for Homebrew's packaging of
> python3 in https://github.com/Homebrew/homebrew-core/pull/68528
> 
> Reference: https://trac.sagemath.org/ticket/33078
> 

thanks Matthias
for the report and the reference.

It seems we have built all the pythons in the same way so
all versions always had it.

I will look to build a test version with the suggested change.

regards
Marco

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple