1 |
torsdag 09 januari 2014 22.57.09 skrev Pacho Ramos: |
2 |
> El jue, 09-01-2014 a las 21:58 +0100, Magnus Granberg escribió: |
3 |
> > Hi |
4 |
> > |
5 |
> > Some time ago we discussed that we should enable stack smashing |
6 |
> > (-fstack-protector) by default. So we opened a bug to track this [1]. |
7 |
> > The affected Gcc version will be 4.8.2 and newer. Only amd64, x86, mips, |
8 |
> > ppc, ppc64 and arm will be affected by this change. |
9 |
> > |
10 |
> > You can turn off ssp by using the nossp USE flag or by adding |
11 |
> > -fno-stack-protector to the CFLAGS and/or CXXFLAGS. We are using the same |
12 |
> > patch as Debian/Ubuntu but with some Gentoo fixes. |
13 |
> > |
14 |
> > The patch will move the sed for the HARD_CFLAGS, ALLCFLAGS and |
15 |
> > ALLCXXFLAGS from do_gcc_PIE_patches() to make_gcc_hard(). We will |
16 |
> > make_gcc_hard() the default for all Gcc versions 4.8 and newer, and turn |
17 |
> > it on or off with hardened_gcc_works() that will make some sanity checks. |
18 |
> > |
19 |
> > /Magnus |
20 |
> |
21 |
> What are the advantages of disabling SSP to deserve that "special" |
22 |
> handling via USE flag or easily disabling it appending the flag? |
23 |
> |
24 |
> Thanks a lot for the info :) |
25 |
|
26 |
If you want Gcc not to build stuff with ssp as default you turn on the nossp |
27 |
flag and rebuild Gcc. |
28 |
|
29 |
/Magnus |