Gentoo Archives: gentoo-hardened

From: Mike Frysinger <vapier@g.o>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] SSP + setjmp() = badness?
Date: Mon, 31 Jul 2006 18:19:53
Message-Id: 200607311417.23930.vapier@gentoo.org
In Reply to: Re: [gentoo-hardened] SSP + setjmp() = badness? by Jure Varlec
1 On Monday 31 July 2006 09:51, Jure Varlec wrote:
2 > On Monday 31 July 2006 00:35, Mike Frysinger wrote:
3 > > dont waste your time on gcc-3.x
4 >
5 > Please tell me then, is hardened gcc 4.1 the way to go?
6
7 i guess that depends who you ask and how you look at it ;)
8
9 gcc-3.x is dead; any time bugs are encountered in the ssp in 3.x, there's
10 basically nothing we can do about it people generally lack the technical
11 ability to go into the gcc-3.x ssp source code base and fix it
12
13 gcc-4.1 is alive and any ssp issues encountered can be pushed upstream and the
14 gcc folks will resolve them
15
16 when it comes to integration with Gentoo though, gcc-3.x is fully
17 integrated ... real work has not been started to move to gcc-4.1+ for
18 hardened though, just some foundations have been laid
19 -mike