Support building glibc with -fstack-protector
"Tóth Attila" <[email protected]> Wed, 21 Dec 2016 19:03:26 +0100
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
I don't know who else follows it on this list, but some interesting commits are happening upstreams regarding to compile glibc with fstack-protector enabled, thanks to Nick Alcock from Oracle. I'm not sure how these behaves with the more recent fstack-protector-strong. It seems to be a nice Xmas present under the hardened tree. BR: Dw -- dr Tóth Attila, Radiológus, 06-20-825-8057 Attila Toth MD, Radiologist, +36-20-825-8057 ---------------------------- Eredeti üzenet ----------------------------- Tárgy: [Bug build/7065] Support building glibc with -fstack-protector or -fstack-protector-all Feladó: "cvs-commit at gcc dot gnu.org" <sourceware-bugzilla-9JcytcrH/[email protected]> dátum: 2016.December 21.(Sze) 12:41 Címzett: [email protected] -------------------------------------------------------------------------- https://sourceware.org/bugzilla/show_bug.cgi?id=7065 --- Comment #21 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> --- This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "GNU C Library master sources". The branch, master has been updated via fcd942370ff863f67f971e255d30fb9c1f127607 (commit) from 2908885c822eb43ffa2cdd67e0464e6d35afaf53 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=fcd942370ff863f67f971e255d30fb9c1f127607 commit fcd942370ff863f67f971e255d30fb9c1f127607 Author: Nick Alcock <[email protected]> Date: Wed Dec 21 12:04:12 2016 +0100 x86_64: tst-quad1pie, tst-quad2pie: compile with -fPIE [BZ #7065] With stack protection enabled, these files have external symbol references for the first time, so the fact that they are not compiled with -fPIE and are then linked into a -pie binary starts to hurt. ----------------------------------------------------------------------- Summary of changes: ChangeLog | 6 ++++++ sysdeps/x86_64/Makefile | 3 +++ 2 files changed, 9 insertions(+), 0 deletions(-) -- You are receiving this mail because: You are on the CC list for the bug.