RE: Stack-Smash Protector

"Bob Kimmel" <[email protected]>
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
> Anyone have any luck building glibc-2.2.5-2 with a
> stack-protection-enabled gcc 3.2?  It breaks on me in the early stages
> of compilation.
>
> The stack protector is a gcc patch by Hiroaki Etoh (IBM) that causes gcc
> to insert stack protection code into binaries during compilation.  Check
> it out:   http://www.trl.ibm.com/projects/security/ssp/
>
> Thanks,
> Dave Maietta
>

I'm building an LFS 4.0 at the moment, and added this patch.  No problem
so far, although I won't vouch for a whole lot more than successful
compilation of the library at this point.  Compiled the static version
of the compiler (with the protectonly.dif patch), so far have compiled
glibc and the dynamic version of gcc (again with the protectonly.dif patch).
A small program similar to the KR "Hello, world!" program compiles and
runs no problem within the chroot environment, both with and without stack
protection, so at least some of the libraries must be working.  Whether or
not they are providing any actual protection against stack smashing, that's
another question...

BK

-- 
Unsubscribe: send email to [email protected]
and put 'unsubscribe lfs-security' in the subject header of the message
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.