Skip to content

Releases: rui314/mold

mold 2.3.0

18 Oct 11:12
Compare
Choose a tag to compare

mold 2.3.0 is a new release of the high-speed linker.

New features

  • [x86-64] mold 2.3.0 has introduced an experimental flag, -z rewrite-endbr, which rewrites superfluous endbr64 instructions as nop.

    endbr64 is a relatively recent x86 instruction used to mark locations where an indirect jump instruction can transfer control. With control-flow integrity enabled (meaning endbr64 is effective), an indirect jump can only target an endbr64 or it will trigger a runtime exception. This mechanism significantly hinders certain control hijacking attacks, such as ROP or JOP, since attackers cannot jump to just any location.

    When given the -fcf-protection flag, GCC conservatively places an endbr64 at the beginning of every global function. This is because the function's address might be taken as a pointer by other translation units. However, in most cases, function addresses are not actually taken. This conservative approach results in an overabundance of unnecessary endbr64 instructions, leading to not only code bloating but also a potential decrease in security as there are more locations for an attacker to exploit.

    The new linker option, -z rewrite-endbr, aims to alleviate this issue. The linker can carry out a whole-program analysis on the input files to identify functions whose addresses are never taken. If -z rewrite-endbr is specified, mold will conduct this analysis and replace the initial endbr64 with a nop for functions whose addresses aren't taken.

    mold also emits an endbr64 in a PLT entry only when the address of the PLT entry is taken. (17f0d85)

Bug fixes and compatibility improvements

  • mold now produces a more compact .gdb_index section when using the --gdb-index flag. Additionally, mold now generates a correct .gdb_index section for object files created by Clang. (a396fa4)
  • mold is now capable of handling input sections larger than 4 GiB. (0ce32d3)
  • [PPC] mold can now generate executables for POWER10 processors. Previously, executables produced by mold would crash immediately on startup on POWER10. (0f71471)
  • [ARM64] When a function with a non-standard calling convention is exported, it's mandatory for the linker to turn on the STO_AARCH64_VARIANT_PCS flag to notify the dynamic linker. mold now appropriately sets this flag. (2e3b56e)
  • [RISC-V] mold now supports new GP-relative relocations. (ac3ee91)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank everyone who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

Signal Slot Inc.
Mercury
G-Research-OSS
Jinkyu Yi
Emerge Tools
Cybozu, Inc.
jfmontanaro
Steven Noonan
Brett Slatkin
Dougall Johnson
Santiago Pastorino
CubeSoft, Inc.
Rahul Butani
Kyle Lacy
daquexian
Josh Triplett
Kiril Mihaylov

mold 2.2.0

24 Sep 07:18
Compare
Choose a tag to compare

mold 2.2.0 is a new release of the high-speed linker.

New features

  • We now use BLAKE3 as a cryptographic hash function instead of SHA256. This change has made --build-id a few percent faster. libssl is no longer a build dependency. (7f7a744)
  • mold is now a few percent faster than the previous version due to an optimization of string merging code path. (1a13c50)
  • mold now emits slightly optimized code for thread-local variable accesses. (f057fda, d56f528)
  • [RISC-V] mold now supports TLSDESC relocations. TLSDESC is a new mechanism for faster thread-local variable access. We (@ishitatsuyuki) actually led the effort to ratify the specification (riscv-non-isa/riscv-elf-psabi-doc#373) and implement it to compiler toolchain including GCC, GNU binutils and, of course, mold. (141556d)

Bug fixes and compatibility improvements

  • mold no longer marks an as-needed .so as "needed" if the .so file is not directly used by the output file. Previously, mold marked a .so file as "needed" if the .so file was used by another "needed" .so file. (f02db0f)
  • [PPC64] --execute-only now works on 64-bit PowerPC. (ac20d87, 51fec5f)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank everyone who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

mold 2.1.0

13 Aug 05:10
Compare
Choose a tag to compare

mold 2.1.0 is a new release of the high-speed linker.

New features

  • Loongson's LoongArch CPU has been supported. (03b1a1c)
  • -z nosectionheader has been added to eliminate section headers from the output file. (084ca55)

Bug fixes and compatibility improvements

  • Previously, linking with the -z pack-relative-relocs option produces an executable that glibc 2.38 refuses to run with DT_RELR without GLIBC_ABI_DT_RELR dependency error. Now, mold produces binaries compatible with glibc 2.38. (f467ad1)
  • [ARM64] R_AARCH64_ADR_PREL_PG_HI21_NC relocation type has been supported. (17a5c3e)
  • [ARM64] R_AARCH64_MOVW_UABS_G3 relocation type has now been handled as a PLT-generating relocation to fix an issue when main is not defined in the main executable but rather in a .so file. (e764557)
  • [RISC-V] We now merge input .riscv.attributes contents. Previously, we just concatenated them. (aa64491)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank everyone who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

mold 2.0.0

26 Jul 12:37
Compare
Choose a tag to compare

Mold 2.0.0 is a new major release of our high-speed linker. With this release, we've transitioned our license from AGPL to MIT, aiming to expand the user base of our linker. This was not an easy decision, as those who have been following our progress know that we've been attempting to monetize our product through an AGPL/commercial license dual-licensing scheme. Unfortunately, this approach didn't meet our expectations. The license change represents our acceptance of this reality. We don't want to persist with a strategy that didn't work well.

As always, we welcome new GitHub sponsors. If you are happy with the license change, please consider becoming a sponsor.

In addition to the license change, here is a list of updates we have made in this release:

  • Previously, mold could not produce an object file with more than 65520 sections using the --relocatable option. Now the bug has been fixed. (2e8bd0b)
  • mold now interprets -undefined as a synonym for --undefined instead of -u ndefined. This seems inconsistent, as -ufoo is generally treated as -u foo (which is an alias for --undefined foo), but this is the behavior of the GNU linkers and LLVM lld, so we prioritize compatibility over consistency.
  • -nopie is now handled as a synonym for --no-pie.
  • [RISC-V] R_RISCV_SET_ULEB128 and R_RISCV_SUB_ULEB128 relocation types are now supported (4bffe26, 1ac5fe7)
  • [PPC64] R_PPC64_REL32 relocation type is now supported. (ebd780e)

mold 1.11.0

16 Mar 08:58
Compare
Choose a tag to compare

mold 1.11.0 is a new release of the high-speed linker. This is not a big release but includes general improvements and bug fixes.

New features

  • IBM Power10 has been supported. Previously, mold created broken executables for that target. (5065547)
  • --hash-style=none has been added to cancel --hash-style=sysv, --hash-style=gnu or --hash-style=both. (ec75633)
  • [ARM32] R_ARM_PLT32 relocation type has been supported. (e505900)
  • [RISC-V] R_RISCV_PLT32 relocation type has been supported. (51845ac)

Bug fixes and compatibility improvements

  • Previous versions of mold failed to link some programs in rare corner cases if Link-Time Optimization (LTO) is enabled. These bugs have been fixed. (e1a7590, 62d6537)
  • mold used to ignore dependencies between DSOs. Since this version, if a required DSO depends on other as-needed DSO, mold keeps the latter DSO as a required one. This improves compatibility with GNU linkers. (1adde7a)
  • [x86-64] mold can now link object files generated by old buggy versions of GCC. (d2970e0)
  • [x86-64] Previously, a program with a very large .bss section may fail to link due to R_X86_64_REX_GOTPCRELX relocation overflow (#975). This bug has been fixed. (627bf7c)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank you to everybody who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

mold 1.10.1

22 Jan 02:48
Compare
Choose a tag to compare

mold 1.10.1 contains only the following bug fix:

  • mold 1.10.0 had a buffer overrun bug that causes the linker to terminate immediately if compiled with -D_GLIBCXX_ASSERTIONS. We fixed the unsafe memory access in this release. (7e65546)

mold 1.10.0

20 Jan 08:09
Compare
Choose a tag to compare

New features

  • mold now officially supports the --print-dependencies option to print out dependency information between input files. Here is a truncated example output when linking mold itself with the option. There are many use cases of the option; for example, if you want to eliminate the dependency to some library from your program, you can use this option to find out all the functions that use the library's function to fix them. (6fd47db)
  • [x86-64][s390x] mold now optimizes thread-local variable accesses in shared libraries if the library is linked with -z nodlopen. If your shared library is not intended to be used via dlopen(2) and your library frequently accesses thread-local variables, you might want to pass that option when linking your library. (25d02bb, f32ce33)
  • [arm64] mold is now able to optimize GOT load by rewriting an ADDR+LDR instruction pair with an ADDR+ADD if the loaded GOT value is known at link-time. (f2311b1)

Bug fixes and compatibility improvements

  • mold 1.9.0 was up to 10% slower than 1.8.0 on some multicore machines. We fixed the performance regression and made it even faster than 1.8.0. (7132822)
  • Previously, mold failed to report an undefined symbol error if there's a weak undefined symbol of the same name. That bug resulted in producing a non-working executable instead of reporting a link failure. Now, mold correctly reports such link errors. (8936194)
  • mold 1.9.0 might crash with SIGSEGV if --emit-relocs is used with object files containing debug info. That bug has been fixed. (e17d7da)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank you to everybody who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

mold 1.9.0

06 Jan 09:31
Compare
Choose a tag to compare

New features

  • mold gained support for the three new targets: 32-bit PowerPC, SH-4 and DEC Alpha. Each porting work didn't take more than a few days for us to complete, which demonstrate how portable the mold linker is. You can typically port mold to a new target just by writing a few hundreds lines of target-specific code. See arch-*.cc files in mold/elf/ directory to see how target-specific code actually looks like. (651adad, 3411e17, 6231510)

Bug fixes and compatibility improvements

  • In a rare occasion, a statically-initialized function pointer might get a wrong address in a statically-linked executable. This bug has been fixed. (ccd47db)
  • Fixed a -gdb-index option's crash bug on big-endian hosts. (3c96828)
  • [RISC-V] mold rewrote machine instructions in a wrong way as a result of a wrong R_RISCV_HI20 relaxation if the output file was being linked against the high address. It's not a problem for user-land programs, but kernels linked with mold could crash due to this bug. This bug has been fixed. (3c96828)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank you to everybody who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

mold 1.8.0

26 Dec 07:10
Compare
Choose a tag to compare

mold 1.8.0 is a new release of the high-speed linker.

New features

  • The --relocatable (or -r) option has been reimplemented to improve its performance and compatibility with the GNU linkers. That option tells the linker to combine input object files into another object file instead of into an executable or a shared library file. mold has been supporting the feature since version 0.9, but until now the output file created with -r looked fairly different from what GNU linkers would produce. GHC (Glasgow Haskell Compiler) in particular uses re-linkable object files as dynamic libraries instead of real .so files, and it didn't work with mold. Now, mold can produce object files that GHC can load. Note that this work was funded by Mercury, so thanks to the company to help us improve the product. (Yes, you can ask us to prioritize your feature request by funding the project.) (c9a7ae7)
  • --relocatable-merge-sections option has been added. By default, mold keeps original input section names for the --relocatable output and therefore does not merge input sections into a single output sections unless they are of the same name. If --relocatable-merge-sections is given, mold merges input by the usual default merging rule. For example, .text.foo and .text.bar are merged to .text if and only if --relocatable-merge-sections is given for the --relocatable output. (c2a0ae1)
  • -z [no]dynamic-undefined-weak options have been added. This option controls whether an undefined weak symbol is promoted to a dynamic symbol or not. (ed235f3)
  • --[no-]undefined-version options have been supported. Now, mold warns on a symbol name in a version script if it does not match with any defined symbol. This change was made so that it is easy to find a typo in a version script. (e2d7353)
  • mold now warns on symbol type mismatch. If two object files have the same symbol with different symbol types, it usually means your program has a bug. Chances are, you are using the same identifier as a function name in one translation unit and as a global variable name in another. So it makes sense to warn on the mismatch. (b70211e)
  • mold now merges .gnu.note.property sections for various x86 properties. (d30d743)

Removed features

  • The experimental macOS/iOS support has been removed from mold. If you want to use it, please use our sold linker instead.

Bug fixes and compatibility improvements

  • --wrap now works with LTO. (07d8911)
  • A global variable initialized with an IFUNC function pointer is now initialized correctly with the function's address. Previously, it was mistakenly initialized to the function resolver's address. (b2858d2)
  • The filename specified by --version-script or --dynamic-list is now searched from library search paths if it does not exist in the current working directory. This behavior is compatible with GNU linkers. (3c1a055, 8c87f16)
  • mold now tries to avoid creating copy relocations as much as possible. This change fixed a compatibility issue with GHC. (5866c9e)
  • Thread-local variables are now correctly aligned even if there's a TLV with a large alignment. (bd46edf)
  • mold can now handle GCC LTO files created with -ffat-lto-objects. (804b843)
  • mold now accepts -z nopack-relative-relocs as an alias for --pack-dyn-relocs=none for the sake of compatibility with GNU linkers. (b510588)
  • mold now recognizes -z start-stop-visibility=hidden but ignores it because it's the default for mold. GNU linkers support this option to control the visibility of linker-synthesized __start_<sectname> and __stop_<sectname> symbols, with global as the default visibility. mold creates these symbols with the hidden visibility by default, which is desirable for almost all cases. (22c9ec8)
  • [ARM32, i386] mold now emits REL-type relocations instead of RELA-type for the --relocatable output file. (8b373d3)

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank you to everybody who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle:

mold 1.7.1

18 Nov 11:56
Compare
Choose a tag to compare

mold 1.7.1 is a bug-fix release containing only the following change:

Bug fix

  • mold 1.7.0 may generate the same build-id for two different output files. We fixed the issue in 1.7.1 so that build-id is guaranteed to be unique for each different output file. (d8dd124)

Licensing

My comment in the last release notes about a possible license change caused an overwhelming response. Thank you guys for taking care of the software and its ecosystem. We will reconsider our plan based on the feedback. We may still want to change the license of mold/macOS, but we are not going to change the license of mold/Unix at least in a next few releases.

On this occasion, I want to say something. We are not a big evil corp who are trying to squeeze as much money as possible from users. This is mostly a one-person project, and what we are trying to do is to create better tools and make them publicly available to improve programmers' productivity worldwide. If you think of the number of developers who are using compiled languages and how many person-minutes we can save every year with better tools, the sum is a huge saving. We'd like to get a small chunk of it as a return. I believe we are doing good job at creating better tools but struggling to establish a way to get a return from it.

Please keep in mind that there are always people behind an open-source project. Some feedback to my comment were honestly too harsh and disrespectful. Open-source is as much as about people as it is about software. Please respect each other even if you have a different opinion.

By the way, for those who wish to obtain a copy of the mold linker in a different license than AGPL, we finally set up our company web site. You can purchase a license of the "sold" linker (which is a rebranded mold linker) using credit card. Unlike mold, sold is available under a usual per-user, per-month license. We believe this is a good option for some organizations, so please visit our website at bluewhale.systems to check it out.

Acknowledgements

mold is an open-source project, and we accept donations via GitHub Sponsors and OpenCollective. We thank you to everybody who sponsors our project. In particular, we'd like to acknowledge the following organizations and people who have sponsored $32/mo or more during this release cycle: