bootstrap env: disable stackprotector hardening until gcc >=4.9

pkgs/development/compilers/gcc/4.9/default.nix

@@ -220,6 +220,8 @@ stdenv.mkDerivation ({
 
   inherit patches;
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
   hardening_format = false;
 
   postPatch =

pkgs/development/interpreters/perl/5.20/default.nix

@@ -30,6 +30,9 @@ stdenv.mkDerivation rec {
 
   outputs = [ "out" "man" ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   patches =
     [ # Do not look in /usr etc. for dependencies.
       ./no-sys-dirs.patch

pkgs/development/libraries/cloog/0.18.0.nix

@@ -18,6 +18,9 @@ stdenv.mkDerivation rec {
 
   doCheck = true;
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = {
     description = "Library that generates loops for scanning polyhedra";
 

pkgs/development/libraries/gettext/default.nix

@@ -11,6 +11,8 @@ stdenv.mkDerivation (rec {
 
   outputs = [ "out" "doc" ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
   hardening_format = false;
 
   LDFLAGS = if stdenv.isSunOS then "-lm -lmd -lmp -luutil -lnvpair -lnsl -lidmap -lavl -lsec" else "";

pkgs/development/libraries/gmp/5.1.x.nix

@@ -12,6 +12,9 @@ stdenv.mkDerivation rec {
 
   nativeBuildInputs = [ m4 ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   patches = if stdenv.isDarwin then [ ./need-size-t.patch ] else null;
 
   configureFlags =

pkgs/development/libraries/isl/0.11.1.nix

@@ -13,6 +13,9 @@ stdenv.mkDerivation rec {
 
   enableParallelBuilding = true;
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = {
     homepage = http://www.kotnet.org/~skimo/isl/;
     license = stdenv.lib.licenses.lgpl21;

pkgs/development/libraries/libelf/default.nix

@@ -10,6 +10,9 @@ stdenv.mkDerivation (rec {
 
   doCheck = true;
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   # For cross-compiling, native glibc is needed for the "gencat" program.
   crossAttrs = {
     nativeBuildInputs = [ glibc ];

pkgs/development/libraries/libmpc/default.nix

@@ -16,6 +16,9 @@ stdenv.mkDerivation rec {
 
   doCheck = true;
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = {
     description = "Library for multiprecision complex arithmetic with exact rounding";
 

pkgs/development/libraries/mpfr/default.nix

@@ -13,6 +13,9 @@ stdenv.mkDerivation rec {
   # mpfr.h requires gmp.h
   propagatedBuildInputs = [ gmp ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   configureFlags =
     stdenv.lib.optional stdenv.isSunOS "--disable-thread-safe" ++
     stdenv.lib.optional stdenv.is64bit "--with-pic";

pkgs/development/libraries/zlib/default.nix

@@ -29,6 +29,9 @@ stdenv.mkDerivation (rec {
     fi
   '';
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+    hardening_stackprotector = false;
+
   # As zlib takes part in the stdenv building, we don't want references
   # to the bootstrap-tools libgcc (as uses to happen on arm/mips)
   NIX_CFLAGS_COMPILE = stdenv.lib.optionalString (!stdenv.isDarwin) "-static-libgcc";

pkgs/development/tools/misc/binutils/default.nix

@@ -39,6 +39,9 @@ stdenv.mkDerivation rec {
 
   inherit noSysDirs;
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   preConfigure = ''
     # Clear the default library search path.
     if test "$noSysDirs" = "1"; then

pkgs/development/tools/misc/gnum4/default.nix

@@ -18,6 +18,9 @@ stdenv.mkDerivation rec {
   # Upstream is aware of it; it may be in the next release.
   patches = [ ./s_isdir.patch ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = {
     homepage = http://www.gnu.org/software/m4/;
     description = "GNU M4, a macro processor";

pkgs/development/tools/misc/patchelf/default.nix

@@ -10,6 +10,9 @@ stdenv.mkDerivation rec {
 
   setupHook = [ ./setup-hook.sh ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = {
     homepage = http://nixos.org/patchelf.html;
     license = "GPL";

pkgs/development/tools/misc/texinfo/6.0.nix

@@ -17,6 +17,9 @@ stdenv.mkDerivation rec {
 
   configureFlags = stdenv.lib.optional stdenv.isSunOS "AWK=${gawk}/bin/awk";
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   preInstall = ''
     installFlags="TEXMF=$out/texmf-dist";
     installTargets="install install-tex";

pkgs/development/tools/parsing/bison/3.x.nix

@@ -11,6 +11,9 @@ stdenv.mkDerivation rec {
   nativeBuildInputs = [ m4 perl ] ++ stdenv.lib.optional stdenv.isSunOS help2man;
   propagatedBuildInputs = [ m4 ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = {
     homepage = "http://www.gnu.org/software/bison/";
     description = "Yacc-compatible parser generator";

pkgs/os-specific/linux/kernel-headers/3.18.nix

@@ -34,6 +34,9 @@ stdenv.mkDerivation {
 
   buildInputs = [perl];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   extraIncludeDirs =
     if cross != null then
         (if cross.arch == "powerpc" then ["ppc"] else [])

pkgs/os-specific/linux/paxctl/default.nix

@@ -18,6 +18,9 @@ stdenv.mkDerivation rec {
     "MANDIR=share/man/man1"
   ];
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   setupHook = ./setup-hook.sh;
 
   meta = with stdenv.lib; {

pkgs/tools/compression/xz/default.nix

@@ -15,6 +15,9 @@ stdenv.mkDerivation rec {
 
   postInstall = "rm -rf $out/share/doc";
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = with stdenv.lib; {
     homepage = http://tukaani.org/xz/;
     description = "XZ, general-purpose data compression software, successor of LZMA";

pkgs/tools/misc/coreutils/default.nix

@@ -20,6 +20,9 @@ let
       sha256 = "0w11jw3fb5sslf0f72kxy7llxgk1ia3a6bcw0c9kmvxrlj355mx2";
     };
 
+    # FIXME needs gcc 4.9 in bootstrap tools
+    hardening_stackprotector = false;
+
     patches = if stdenv.isCygwin then ./coreutils-8.23-4.cygwin.patch else
               (if stdenv.isArm then (fetchurl {
                   url = "http://git.savannah.gnu.org/cgit/coreutils.git/patch/?id=3ba68f9e64fa2eb8af22d510437a0c6441feb5e0";

pkgs/tools/system/which/default.nix

@@ -8,6 +8,9 @@ stdenv.mkDerivation rec {
     sha256 = "1bgafvy3ypbhhfznwjv1lxmd6mci3x1byilnnkc7gcr486wlb8pl";
   };
 
+  # FIXME needs gcc 4.9 in bootstrap tools
+  hardening_stackprotector = false;
+
   meta = with stdenv.lib; {
     homepage = http://ftp.gnu.org/gnu/which/;
     platforms = platforms.all;