[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20141106144741.3156c6bc@vostro>
Date: Thu, 6 Nov 2014 14:47:41 +0200
From: Timo Teras <timo.teras@....fi>
To: John Spencer <maillist-musl@...fooze.de>
Cc: musl@...ts.openwall.com, Gregor Richards <gr@...due.edu>
Subject: Re: fixing -fPIE + -fstack-protector-all
On Thu, 06 Nov 2014 13:40:43 +0100
John Spencer <maillist-musl@...fooze.de> wrote:
> Timo Teras wrote:
> > On Wed, 05 Nov 2014 16:25:03 +0100
> > John Spencer <maillist-musl@...fooze.de> wrote:
> >
> >> using -fPIE + -fstack-protector-all is currently broken for a
> >> number of architectures (most notably i386) in the default gcc
> >> setup (including the musl-cross patches), as it depends on a
> >> libssp_nonshared.a which provides __stack_chk_fail_local().
> >
> > In Alpine Linux we are patching gcc to unconditionally to have
> > -lssp_nonshared:
> > http://git.alpinelinux.org/cgit/aports/tree/main/gcc/gcc-4.8-musl-libssp.patch
> >
> > And making musl package provide that library:
> > http://git.alpinelinux.org/cgit/aports/tree/main/musl/__stack_chk_fail_local.c
> > http://git.alpinelinux.org/cgit/aports/tree/main/musl/APKBUILD#n60
> >
>
> yeah, i originally looked at what alpine does but then noticed that
> gcc builds its own libssp_nonshared.a anyway.
> btw: the gcc one is, unlike alpine's, built with hidden visibility
> (from ssp-local.c):
We do set the hidden visibility attribute. If it's not working then
something is wrong somewhere.
And yes, gcc is eager to build it's own libssp. You need to
--disable-libssp for the above to work. We do it at:
http://git.alpinelinux.org/cgit/aports/tree/main/gcc/APKBUILD#n273
/Timo
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
