The following compilation options are not enabled for grpc.jar

[ystttt]

The following compilation options are not enabled for libio_grpc_netty_shaded_netty_xx.so:

1. BIND_NOW
2. SP
3. FS
4. Ftrapv
5. Strip

These issues may pose security risks and require further remediation.

[kannanjgithub]

Can you tell us what method you use to determine what compiler options were used for the shared library? libio_grpc_netty_shaded_netty_xx.so is relocated from upstream Netty distribution.
What do the SP and FS options mean?
Ftrapv deals with overflow handling and the code needs to be prepared for it also for it to work.
Stripping is not related to security. It only matters for file size. In an earlier issue we filed with Netty they decided not to strip all symbols because they are useful for debugging and it didn't add much size. Instead, they just partially strip/avoid the large stuff (PR). We expect no changes to be done here.
We may like to have the Bind now option however, as it would fix an Alpine problem.

(With valuable inputs from @ejona86).