Re: F45 Change Proposal: Enable Shadow Stack by Default on x86_64 (system-wide)

> This change enables Shadow Stack protection on applications and
> libraries built with gcc (C, C++), [...]

Only C and C++? Or everything compiled with GCC and -fcf-protection?

Readelf shows "IBT, SHSTK" for several of our Ada libraries, so it
would seem like those are compliant – but those properties are missing
from Libgnat, which all Ada code is linked to. Thus I'm wondering
whether the GCC package just needs to be fixed to build a compliant
Libgnat, or whether there's some deeper reason why the protection works
only for C and C++.

While Ada is much more resistant to buffer overflows than C, many Ada
programs are linked to libraries written in C (because reimplementing
all the libraries would be a lot of work). It would be unfortunate if
those libraries would lose this protection when loaded by an Ada
program.

Björn Persson

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE52SginNFTPmg+iBb4Tha3NZK5j8FAmpKyBIACgkQ4Tha3NZK
5j/g/Q/+OpMwuc3v0SZj1159x6DoAeJO9bQiQ9zc75rZPIm2MBi5/IqfGjdWXANm
9N2OTYd4XJdNFuBr12j2AjWSkeTjn/HdA8rQNtuOuMBHzdLB16rcWtSwL9r1FGvR
T6HWYfVh2YHEIIBLmN3yig0GrxrJai4pHf5lO28eeNha/5EkO1MK1zeuhh3Cnaa7
oVs87Z9ftr6IkduvOe1PhuxlfvB0ckEuTggIc9U/DdUXRzIMa6GMBja2G9xGnL6L
YReR5FCKaLoEPs6M+kwAGnydTw2DwnSQ0wSJyNe5lru+lmFzoT4wOXVJ+3Y8f9gg
58PHb0G4FxjwFjPQW+LqcLg6a9QVBiZ3Pj74NLp2DPBmg2hVRsRU0S7w0QI/kflD
sIugnMkL8wdNVWaxhpWtFxzNJ3EE2Aro0Gi7cvagDaUlEMjY0HeL4FvHVZK0218i
40hwjpnGUNKdJCPytvlinKcihPe20lbGmdqf49G7r7yWUA4REH5SQNhksZ8b0FKa
0wBiBG3BrwgWgKWtMRFRA3xPNkxo6k3dir1eRk6DsVJ0SIK0ZRxb6lL/eH81Psx5
BFumUYGzCimYTrEbjaFisYejzkARGc3TAtj9+AjrAlY2of77fBqk7eW7ExkQCueX
0t+HhsSiktUeKZNFH1FndvFp+s10LzaQ1yLWYsJbT2w6te00HRg=
=Md6W
-----END PGP SIGNATURE-----