Gentoo Archives: gentoo-dev

From: "Rick \\\"Zero_Chaos\\\" Farina" <zerochaos@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH] To enable ssp default in Gcc the toolchain.eclass need some changes.
Date: Thu, 09 Jan 2014 21:11:22
Message-Id: 52CF1080.7010400@gentoo.org
In Reply to: [gentoo-dev] [PATCH] To enable ssp default in Gcc the toolchain.eclass need some changes. by Magnus Granberg
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On 01/09/2014 03:58 PM, Magnus Granberg wrote:
5 > Hi
6 >
7 > Some time ago we discussed that we should enable stack smashing
8 > (-fstack-protector) by default. So we opened a bug to track this [1].
9 > The affected Gcc version will be 4.8.2 and newer. Only amd64, x86, mips, ppc,
10 > ppc64 and arm will be affected by this change.
11 >
12 > You can turn off ssp by using the nossp USE flag or by adding
13 > -fno-stack-protector to the CFLAGS and/or CXXFLAGS. We are using the same
14 > patch as Debian/Ubuntu but with some Gentoo fixes.
15
16 Please avoid "noblah" use flags.
17
18 http://devmanual.gentoo.org/general-concepts/use-flags/
19
20 ssp flag that defaults to on is fine.
21
22 Thanks,
23 Zero
24
25 >
26 > The patch will move the sed for the HARD_CFLAGS, ALLCFLAGS and
27 > ALLCXXFLAGS from do_gcc_PIE_patches() to make_gcc_hard(). We will
28 > make_gcc_hard() the default for all Gcc versions 4.8 and newer, and turn
29 > it on or off with hardened_gcc_works() that will make some sanity checks.
30 >
31 > /Magnus
32 >
33
34 -----BEGIN PGP SIGNATURE-----
35 Version: GnuPG v2.0.22 (GNU/Linux)
36 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
37
38 iQIcBAEBAgAGBQJSzxCAAAoJEKXdFCfdEflKohoP/iDVryOAlunTvMtrhHYlZAXn
39 LTPbJRNMQ9bJB8bAd9ECRJ8Q92pAyQt+NyNgUFLtatI+UuiZM6t+dz4K0LcmMQka
40 n5i6ILdJ14V0BRLGhRz+Xa0ZjpnYRJjCAWrFENTDY6wHc5ni0hSb32xBg84L6j/3
41 HzNFIWnQOp9dw3hH5OPNQrPXndPVYZMjYTfIADSGx8/4dL9A0GWPY6AXOz08NwuC
42 oC+zkQi2xSXCb7eHTfkKcIW0TIOF7mFp8Z5LsdW5dm/8nCCLDVH7yxmxVyymyMpb
43 RnraqCghiv5WOJVsysgivtNPzBwR3ATrNk4dl2qigZSGpJcDEgF2AtSv+YAVb1Ux
44 wcGOJ5ZJizkMBdAo2pqUBeekXPT/LLWg1EtRvhFI3OLInhbwaHaF9kMWEmhwq2d9
45 sX6ZfoCmtvn4ZtG3fL++RqyK5QevKOXFCtN2pK9DVMjjgHgp6OtnmVXVCMuZTztI
46 uqI3XGVvDc0dNIwgxI6KIEfV4/S05Q599hLI49YJVniPknp+sUnsYIdQ+mKztwDf
47 XON5Fq/Yzt07G1FqZMutEpVMjeTjVckpcLgbFlWz+lO6/xIrqJUgnLUNTXTQf34r
48 n54Rw+WWIGUWAQqwK3bDh9N2etLzG8p8TqhzEXSCMKXP0sjbX1zzJiYl1roMMpu3
49 nTFjVJbwpgoaw8OR6FW4
50 =tSUd
51 -----END PGP SIGNATURE-----

Replies