RE: Stack-Smash Protector
"Bob Kimmel" <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
> Anyone have any luck building glibc-2.2.5-2 with a > stack-protection-enabled gcc 3.2? It breaks on me in the early stages > of compilation. > > The stack protector is a gcc patch by Hiroaki Etoh (IBM) that causes gcc > to insert stack protection code into binaries during compilation. Check > it out: http://www.trl.ibm.com/projects/security/ssp/ > > Thanks, > Dave Maietta > I'm building an LFS 4.0 at the moment, and added this patch. No problem so far, although I won't vouch for a whole lot more than successful compilation of the library at this point. Compiled the static version of the compiler (with the protectonly.dif patch), so far have compiled glibc and the dynamic version of gcc (again with the protectonly.dif patch). A small program similar to the KR "Hello, world!" program compiles and runs no problem within the chroot environment, both with and without stack protection, so at least some of the libraries must be working. Whether or not they are providing any actual protection against stack smashing, that's another question... BK -- Unsubscribe: send email to [email protected] and put 'unsubscribe lfs-security' in the subject header of the message