Re: -fstack-check vs -fstack-clash-protection

Lloyd Parkes <[email protected]> writes:

> I had a bit of read of our documentation and the NetBSD documentation.
>
> The name PKGSRC_USE_STACK_CHECK, the option -fstack-check, the usage
> of PKGSRC_USE_STACK_CHECK in pksgrc and all the various bits of
> documentation seem to line up fairly well. I don't think it's worth
> changing any of it. We risk having inconsistent documentation if we
> don't find all the references.

seems reasonable

> I can see value in adding a new pkgsrc setting. I'm not in love with
> the length of the name PKGSRC_USE_STACK_CLASH_PROTECTION but maybe we
> could have PKGSRC_PROTECT_STACK_CLASH? Then we would just need to add
> a section B.1.2.3 to https://www.netbsd.org/docs/pkgsrc/hardening.html
> and call the documentation done.

Agreed about length but I think PKGSRC_USE is an important prefix, so
how about PKGSRC_USE_STACK_CLASH?

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQS7wyAjWilQwVHG9Vsf2nroCY7WDgUCYuR9bgAKCRAf2nroCY7W
DkRiAJ4i0dApsYShFmmNfwPsUrdf/t6WbwCfchEDe5gHWZrQfzJoSC4VImeqtok=
=Zboy
-----END PGP SIGNATURE-----