Gentoo Archives: gentoo-dev

From: Ryan Hill <dirtyepic@g.o>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] Re: [PATCH] To enable ssp default in Gcc the toolchain.eclass need some changes.
Date: Fri, 10 Jan 2014 05:10:01
Message-Id: 20140109231828.48629961@caribou.gateway.pace.com
In Reply to: [gentoo-dev] [PATCH] To enable ssp default in Gcc the toolchain.eclass need some changes. by Magnus Granberg
1 On Thu, 09 Jan 2014 21:58:46 +0100
2 Magnus Granberg <zorry@g.o> wrote:
3
4 > Some time ago we discussed that we should enable stack smashing
5 > (-fstack-protector) by default. So we opened a bug to track this [1].
6 > The affected Gcc version will be 4.8.2 and newer. Only amd64, x86, mips, ppc,
7 > ppc64 and arm will be affected by this change.
8 >
9 > You can turn off ssp by using the nossp USE flag or by adding
10 > -fno-stack-protector to the CFLAGS and/or CXXFLAGS. We are using the same
11 > patch as Debian/Ubuntu but with some Gentoo fixes.
12 >
13 > The patch will move the sed for the HARD_CFLAGS, ALLCFLAGS and
14 > ALLCXXFLAGS from do_gcc_PIE_patches() to make_gcc_hard(). We will
15 > make_gcc_hard() the default for all Gcc versions 4.8 and newer, and turn
16 > it on or off with hardened_gcc_works() that will make some sanity checks.
17
18 I went ahead and spun a new patchset for the compiler-side stuff if anyone
19 wants to start playing around.
20
21 - apply the eclass patch from bug #484714 (the one attached to Magnus' email
22 wouldn't apply for me but maybe my mailer mangled it)
23 - in gcc-4.8.2.ebuild do:
24
25 -PATCH_VER="1.3"
26 +PATCH_VER="1.4-ssptest"
27
28 -PIE_VER="0.5.8"
29 +PIE_VER="0.5.9-ssptest"
30
31 BTW Magnus, thanks for doing this.
32
33
34 --
35 Ryan Hill psn: dirtyepic_sk
36 gcc-porting/toolchain/wxwidgets @ gentoo.org
37
38 47C3 6D62 4864 0E49 8E9E 7F92 ED38 BD49 957A 8463

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies