Attachment 161460 Details for Bug 203394 – Enable stack-protector-strong and RELRO

[patch] Enable stack-protector-strong and RELRO

toolchain-security.diff (text/plain), 1008 bytes, created by Pedro F. Giffuni on 2015-09-27 15:49:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Pedro F. Giffuni

Created: 2015-09-27 15:49:45 UTC

Size: 1008 bytes

patch

obsolete

>Index: share/mk/bsd.sys.mk
>===================================================================
>--- share/mk/bsd.sys.mk	(revision 288310)
>+++ share/mk/bsd.sys.mk	(working copy)
>@@ -149,7 +149,7 @@
> .if ${MK_SSP} != "no" && \
>     ${MACHINE_CPUARCH} != "arm" && ${MACHINE_CPUARCH} != "mips"
> # Don't use -Wstack-protector as it breaks world with -Werror.
>-SSP_CFLAGS?=	-fstack-protector
>+SSP_CFLAGS?=	-fstack-protector-strong
> CFLAGS+=	${SSP_CFLAGS}
> .endif # SSP && !ARM && !MIPS
> 
>Index: contrib/binutils/ld/emultempl/elf32.em
>===================================================================
>--- contrib/binutils/ld/emultempl/elf32.em	(revision 288310)
>+++ contrib/binutils/ld/emultempl/elf32.em	(working copy)
>@@ -97,6 +97,7 @@
>   ldfile_set_output_arch ("${OUTPUT_ARCH}", bfd_arch_`echo ${ARCH} | sed -e 's/:.*//'`);
>   config.dynamic_link = ${DYNAMIC_LINK-TRUE};
>   config.has_shared = `if test -n "$GENERATE_SHLIB_SCRIPT" ; then echo TRUE ; else echo FALSE ; fi`;
>+  link_info.relro = TRUE;
> }
> 
> EOF

Actions: View | Diff

Attachments on bug 203394: 161460 | 161577 | 161684 | 161685