Re: [gentoo-user] "stack-protector-strong" option results in gcc error

[Hinnerk van Bruinehsen]

On Tue, Sep 23, 2014 at 09:16:42AM +0300, Alexander Kapshuk wrote:
> On Tue, Sep 23, 2014 at 5:49 AM, Walter Dnes <waltdnes@××××××××.org> wrote:
> >   CHK     include/generated/utsrelease.h
> >   UPD     include/generated/utsrelease.h
> >   CC      kernel/bounds.s
> > gcc: error: unrecognized command line option '-fstack-protector-strong'
> > make[1]: *** [kernel/bounds.s] Error 1
> > make: *** [prepare0] Error 2
> >
> >   I switched stack-protector to "regular", and it built OK.  I rebooted
> > into it, and it works OK.
> >
> >   My gcc version data...
> >
> > [d531][root][/usr/src/linux] gcc --version
> > gcc (Gentoo 4.7.3-r1 p1.4, pie-0.5.5) 4.7.3
> > Copyright (C) 2012 Free Software Foundation, Inc.
> > This is free software; see the source for copying conditions.  There is NO
> > warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
> >
> >   My install is 32-bit
> >
> > [d531][waltdnes][~] uname -a
> > Linux d531 3.14.16-gentoo #1 SMP Mon Sep 22 20:43:33 EDT 2014 i686 Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz GenuineIntel GNU/Linux
> >
> > --
> > Walter Dnes <waltdnes@××××××××.org>
> > I don't run "desktop environments"; I run useful applications
> >
>
> Looks like support for '-fstack-protector-strong' was implemented in
> more recent versions of gcc. The the URL below for details:
>
> https://securityblog.redhat.com/tag/stack-protector/

'-fstack-protector-strong' is supported as of gcc-4.9.x - unless you upgrade,
you'll forced to use the regular one.

If you want more information on the option take a look here:
http://www.outflux.net/blog/archives/2014/01/27/fstack-protector-strong/

I think it's not even that unlikely that you don't even want the strong
version.

WKR
Hinnerk