1 |
On Mon, 31 Jul 2006, Ned Ludd wrote: |
2 |
|
3 |
> On Mon, 2006-07-31 at 20:33 +0200, pageexec@××××××××.hu wrote: |
4 |
> > On 31 Jul 2006 at 11:28, Ned Ludd wrote: |
5 |
> > > gcc-4.x and hardened are not in the works.. |
6 |
> > > We are undecided at this time how much we wish to pursue that avenue. |
7 |
> > |
8 |
> > which part of hardened gcc is in question? i'd think that at least |
9 |
> > PIE/RELRO/BIND_NOW are as easy to support as in 3.x. |
10 |
> |
11 |
> Yes these would be pretty trivial to do. |
12 |
> |
13 |
> > ssp may or may |
14 |
> > not be a good idea given how new the 4.x series is, but as Mike said, |
15 |
> > at least there's an eager upstream to fix any issues. |
16 |
|
17 |
toolchain.eclass misses the needed support for gcc-4.1 like ssp |
18 |
|
19 |
> I think the major problem we are facing here is how to cleanly upgrade |
20 |
> from 3.x to 4.x. symbol names have changed. And using the stub/aliases |
21 |
> method Peter used in uClibc svn allows the __guard to be overwritten. |
22 |
|
23 |
How can __guard be overwritten, it is even marked with attribute_relro? |
24 |
|
25 |
Peter |
26 |
|
27 |
-- |
28 |
Peter S. Mazinger <ps dot m at gmx dot net> ID: 0xA5F059F2 |
29 |
Key fingerprint = 92A4 31E1 56BC 3D5A 2D08 BB6E C389 975E A5F0 59F2 |
30 |
|
31 |
-- |
32 |
gentoo-hardened@g.o mailing list |