pkg/51479: qemu-2.7.0 does not build with stack protection

[Thomas Klausner <wiz%NetBSD.org@localhost>]

>Number:         51479
>Category:       pkg
>Synopsis:       qemu-2.7.0 does not build with stack protection
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Sep 16 10:30:00 +0000 2016
>Originator:     Thomas Klausner
>Release:        NetBSD 7.99.37
>Organization:
Curiosity is the very basis of education and if you tell me that 
curiosity killed the cat, I say only that the cat died nobly.
- Arnold Edinborough
>Environment:
	
	
Architecture: x86_64
Machine: amd64
>Description:
When building with stack protection turned on, qemu-2.7.0 does not build.
2.6.1 was fine.
The error is:

ld: warning: -z ,relro ignored.
ld: warning: -z ,now ignored.
  Building optionrom/linuxboot.img
  CC    qga/channel-posix.o
ld: warning: -z ,relro ignored.
ld: warning: -z ,now ignored.
  Building optionrom/linuxboot_dma.img
ld: warning: -z ,relro ignored.
ld: warning: -z ,now ignored.
linuxboot_dma.o: In function `bios_cfg_read_entry':
/scratch/emulators/qemu/work/qemu-2.7.0/pc-bios/optionrom/linuxboot_dma.c:165: undefined reference to `__stack_chk_guard'
/scratch/emulators/qemu/work/qemu-2.7.0/pc-bios/optionrom/linuxboot_dma.c:181: undefined reference to `__stack_chk_fail_local'
linuxboot_dma.o: In function `load_kernel':
/scratch/emulators/qemu/work/qemu-2.7.0/pc-bios/optionrom/linuxboot_dma.c:224: undefined reference to `__stack_chk_guard'
/scratch/emulators/qemu/work/qemu-2.7.0/pc-bios/optionrom/linuxboot_dma.c:298: undefined reference to `__stack_chk_fail_local'
Makefile:49: recipe for target 'linuxboot_dma.img' failed
make[1]: *** [linuxboot_dma.img] Error 1

>How-To-Repeat:
Build with:
PKGSRC_MKPIE=           yes
PKGSRC_USE_FORTIFY=     yes
PKGSRC_USE_RELRO=       yes
PKGSRC_USE_SSP=         all
in /etc/mk.conf, though probably only PKGSRC_USE_SSP is necessary
for this error.
>Fix:
Yes, please.

>Unformatted: