1 |
On 18 Nov 2003, Ned Ludd wrote: |
2 |
|
3 |
> http://www.research.ibm.com/trl/projects/security/ssp/ |
4 |
I didn't meant the original one, the needed modifications to remove |
5 |
guard/smash from libgcc (the original one adds it to libgcc, but the |
6 |
changes of gentoo put it into glibc. Or should it be present in libc and |
7 |
libgcc? |
8 |
|
9 |
Peter |
10 |
|
11 |
|
12 |
> On Mon, 2003-11-17 at 13:37, Peter S. Mazinger wrote: |
13 |
> > On 17 Nov 2003, Ned Ludd wrote: |
14 |
> > |
15 |
> > > On Sun, 2003-11-16 at 19:46, Peter S. Mazinger wrote: |
16 |
> > > > On 12 Nov 2003, Ned Ludd wrote: |
17 |
> > > > |
18 |
> > > > > On Wed, 2003-11-12 at 16:31, Peter S. Mazinger wrote: |
19 |
> > > > > > There are problems building some of the binaries with propolice enabled |
20 |
> > > > > > gcc, mainly the .hidden support in binutils has to be "hidden" from gcc, |
21 |
> > > > > > but as I can see (read), the glibc version does not work flawlessly |
22 |
> > > > > > either. |
23 |
> > > > > > |
24 |
> > > > > Have you successfully used ssp with uclibc? |
25 |
> > > > It worked (somehow, not quite correct, and some packages where not |
26 |
> > > > rebuildable) at the time where uClibc had support for LIBGCC_FUNCTIONS |
27 |
> > > > (adding functions from libgcc to libc) This was the only way I got a |
28 |
> > > > system running it (__guard and __smash... where added to libc). Since then |
29 |
> > > > I cannot modify buildroot so that I get a system running, segfaults on all |
30 |
> > > > the line (tested only with gcc-3.3.x and protector 3.3-5). I think the |
31 |
> > > > solution would be to add the needed functions to uClibc (and remove them |
32 |
> > > > from libgcc!!!). |
33 |
> > > |
34 |
> > > One of the hardened-gcc version introduced guard symbols to libgcc.a. |
35 |
> > > I'm pretty sure this no longer should be the case if your running ~arch |
36 |
> > > as they are in fact getting introduced into glibc. |
37 |
> > > If you care to hack the functionaly into uClibc I'll point you at the |
38 |
> > > glibc version from etoh http://dev.gentoo.org/~solar/ssp/guard.c |
39 |
> > Where do I find the modified protector patch for gcc? |
40 |
> > |
41 |
> > Peter |
42 |
> |
43 |
|
44 |
-- |
45 |
Peter S. Mazinger <ps.m@×××.net> ID: 0xA5F059F2 NIC: IXUYHSKQLI |
46 |
Key fingerprint = 92A4 31E1 56BC 3D5A 2D08 BB6E C389 975E A5F0 59F2 |
47 |
|
48 |
|
49 |
____________________________________________________________________ |
50 |
Miert fizetsz az internetert? Korlatlan, ingyenes internet hozzaferes a FreeStarttol. |
51 |
Probald ki most! http://www.freestart.hu |
52 |
|
53 |
-- |
54 |
gentoo-embedded@g.o mailing list |