[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1680816248.85624355.1367351479825.JavaMail.root@zimbra33-e6.priv.proxad.net>
Date: Tue, 30 Apr 2013 21:51:19 +0200 (CEST)
From: Gilles Espinasse <g.esp@...e.fr>
To: owl-dev@...ts.openwall.com
Subject: Re: PIE on x86_64
----- Mail original -----
> De: "Vasily Kulikov" <segoon@...nwall.com>
> À: owl-dev@...ts.openwall.com
> Envoyé: Mardi 30 Avril 2013 19:36:58
> Objet: Re: [owl-dev] PIE on x86_64
>
...
> >
> > Unfortunately changing the compiler defaults can break things in
> > subtle ways. The most common breakage I'm aware of from making pie the
> > default occurs in packages with assembler source files that are
> > written in non-pic-compatible ways. These will turn into TEXTRELs in
> > the pie binary, which depending on the arch, may just result in heavy
> > runtime bloat (e.g. on 32-bit x86) or produce an error at link time
> > (e.g. on x86_64). I seem to recall a user running into this issue
> > in OpenSSL...
>
> I've tried to enable PIE by default and disable it on -static, etc.
>
> The patch is based on this one:
>
> http://ftp.osuosl.org/pub/lfs/hlfs-packages/unstable/gcc-4.1.2-fpie-2.patch
>
I borrowed the patch from HLFS too, but that was against gcc-4.5.1 (and use that with gcc-4.4).
You could find that at http://ipcop.svn.sourceforge.net/viewvc/ipcop/ipcop/trunk/src/patches/
Patches come from http://www.linuxfromscratch.org/patches/downloads/gcc/
Gentoo has a hardened gcc patchset for any versions:
http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo/src/patchsets/gcc/
...
>
> Some binary files in $PATH still miss DYN Type, will fix this too.
>
On the files that my distrib ship, only ldconfig is not DYN.
Gilles
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
