Re: Call for testers (putting SSP in Debian)

Steve Kemp <[email protected]> Mon, 23 Feb 2004 08:01:56 +0000
Newsgroups gmane.linux.debian.devel.security,gmane.linux.adamantix.devel
Message-ID <[email protected]>
--BOKacYhQ+x31HxR3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Feb 23, 2004 at 12:46:59AM +0100, Thomas Sj?gren wrote:

> with gcc-3.3 (1:3.3.3ds4-0pre4) the maintainers updated the SSP patch.

  That's great news.

> It is not however applied by default.=20
> I submitted a bug report [1] about this, but the problem is that my
> experience with GCC w. SSP in only on the x86 arch. So if you got any
> experience with it on different archs please read the bug reports (see
> the urls below) and send your info so that the Debian GCC-maintainers has=
=20
> enough info to make a good decision about applying the patch.

  For what it's worth I've made a version of GCC with the SSP patches
 enabled available for Debian here:

 	http://people.debian.org/~skx/apt.html

  Description here:

  	http://shellcode.org/Cat/

  I'll try to get these updated with the new patch included in case
 people wish to try these out in a simple manner.  (i386 only, sadly).

Steve
--
# Debian Security Audit Project
http://www.shellcode.org/Audit/


--BOKacYhQ+x31HxR3
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFAObNzwM/Gs81MDZ0RAq9bAJ49XUu7lVtsJEeyPFVdHyKsvzQDigCghzh5
bGRzikzwZQblK37CFnkVjoU=
=Ktu/
-----END PGP SIGNATURE-----

--BOKacYhQ+x31HxR3--