1 |
On Thu, 09 Jan 2014 21:58:46 +0100 |
2 |
Magnus Granberg <zorry@g.o> wrote: |
3 |
|
4 |
> Some time ago we discussed that we should enable stack smashing |
5 |
> (-fstack-protector) by default. So we opened a bug to track this [1]. |
6 |
> The affected Gcc version will be 4.8.2 and newer. Only amd64, x86, mips, ppc, |
7 |
> ppc64 and arm will be affected by this change. |
8 |
> |
9 |
> You can turn off ssp by using the nossp USE flag or by adding |
10 |
> -fno-stack-protector to the CFLAGS and/or CXXFLAGS. We are using the same |
11 |
> patch as Debian/Ubuntu but with some Gentoo fixes. |
12 |
> |
13 |
> The patch will move the sed for the HARD_CFLAGS, ALLCFLAGS and |
14 |
> ALLCXXFLAGS from do_gcc_PIE_patches() to make_gcc_hard(). We will |
15 |
> make_gcc_hard() the default for all Gcc versions 4.8 and newer, and turn |
16 |
> it on or off with hardened_gcc_works() that will make some sanity checks. |
17 |
|
18 |
I went ahead and spun a new patchset for the compiler-side stuff if anyone |
19 |
wants to start playing around. |
20 |
|
21 |
- apply the eclass patch from bug #484714 (the one attached to Magnus' email |
22 |
wouldn't apply for me but maybe my mailer mangled it) |
23 |
- in gcc-4.8.2.ebuild do: |
24 |
|
25 |
-PATCH_VER="1.3" |
26 |
+PATCH_VER="1.4-ssptest" |
27 |
|
28 |
-PIE_VER="0.5.8" |
29 |
+PIE_VER="0.5.9-ssptest" |
30 |
|
31 |
BTW Magnus, thanks for doing this. |
32 |
|
33 |
|
34 |
-- |
35 |
Ryan Hill psn: dirtyepic_sk |
36 |
gcc-porting/toolchain/wxwidgets @ gentoo.org |
37 |
|
38 |
47C3 6D62 4864 0E49 8E9E 7F92 ED38 BD49 957A 8463 |